Information Security Governance Analyst

TechnipFMC is committed to driving real change in the energy industry. Our ambition is to build a sustainable future through relentless innovation and global collaboration – and we want you to be part of it. You’ll be joining a culture that values curiosity, expertise, and ideas as well as equal opportunities, inclusion, and authenticity. Bring your unique energy to our team of more than 21,000 people worldwide, and discover a rewarding, fulfilling, and varied career that you can take in anywhere you want to go.

Job Purpose

Serve as an Information Security Professional as an Information Security Governance Analyst, protecting TechnipFMC information security throughout the system lifecycle. The Information Security Governance Analyst supports the IT compliance program within the Information Security organization. This support includes but is not limited to Sarbanes Oxley (SOX), SOC 2, ISO 27001, ISO 42001, NIST, questionnaires, audits and assessments from 3rd parties, clients and partners assessing the TechnipFMC’s regulatory compliance status.

Job Description

• Audit & Assessment Support
  • Supports internal/external audits and controls testing.
  • Triages, assigns, and tracks requests for information.
  • Gathers, evaluates, and uploads evidence; resolves gaps with SMEs.
  • Performs quality checks on audit evidence before submission.
  • Manages audit schedules and status trackers.
  • Monitors control testing progress and tracks failed tests.
  • Assists with customer assessments and questionnaires.
  • Maintains Audit Findings List and Corrective Action Log.
  • Reports audit findings and evidence status to GRC management.
• Governing Document Management
  • Maintains and updates document status trackers.
  • Monitors and reports document status to stakeholders.
  • Supports document maintenance and updates as needed.
• Program Improvement & Reporting
  • Identifies compliance program gaps and recommends improvements.
  • Maintains GRC metrics, KPIs, and the Risk and Controls Matrix (RCM).
  • Inputs data into the GRC module and publishes GRC-related content.
  • Prepares materials for Management Reviews, Compliance Committees and other meetings.
  • Keeps up-to-date compliance dashboards.

You are meant for this job if:

• Education Requirements: Bachelor’s degree in computer science or related discipline considered as a plus.
• Work Experience: Experience in supporting or auditing IT and Information Security compliance programs. Strong understanding of compliance regulations (e.g., Sarbanes Oxley 404, PCAOB, PCI, GDPR) and security standards (e.g., ISO 27001, NIST CSF). Familiar with IT governance and quality frameworks such as ISO, COBIT, and ITIL. Skilled in compliance metrics tracking. Proven ability to work effectively in global, matrixed environments. Excellent interpersonal, organizational, and communication skills. Strong analytical, problem-solving, and critical thinking capabilities. Comfortable collaborating across enterprise-scale organizations and building effective working relationships. Advanced oral and written communication skills in English.

Skills

• Verbal Communication
• Coaching
• Stakeholder Management
• Technical Writing
• Systems Thinking
• Compliance Support
• Process Improvement
• Budgeting
• Demand Intake
• Project/Program Management
• Business Continuity and Disaster Recovery Planning
• Develop Governance Principles
• Information Security Requirements Management and Analysis
• Governance and Security Administration
• Lean Evidence Handling
• Regulatory Compliance
• Interpreting Requirements
• Project Risk and Issues Management

What we offer

• My Wealth and Protection: Critical Illness Cover, Income Protection, Life Assurance, Will Writing, Workplace ISA, Group Personal Pension Plan - employer contributions up to 10%.
• My Health and Wellbeing: Private Medical Insurance, Employee Assistance Programme, Dental Insurance, Health Assessments & Personal Accident Insurance.
• My Lifestyle: Electric Vehicle Scheme, Cycle2Work, Employee Tech Scheme, Give as You Earn, GymFlex, Holiday Trading, Personal Travel Insurance, Perks at Work.
• My Workplace: Subsidised Cafe, Branded workwear, Hybrid Working, Flexible Working Arrangements, Enhanced Maternity and Parental leave, Talent/Management and Leadership programmes, Various in-house training opportunities for your personal development.
• My Giving: Volunteering opportunities.

Being a global leader in the energy industry requires an inclusive and diverse environment. TechnipFMC promotes equal opportunities and inclusion by ensuring equal opportunities to all ages, races, ethnicities, religions, gender expressions, disabilities, or all other pluralities. We celebrate who you are and what you bring. Every voice matters and we encourage you to add to our culture. TechnipFMC respects the rights and dignity of those it works with and promotes adherence to internationally recognized human rights principles for those in its value chain.

Learn more about TechnipFMC and find other open positions by visiting our Career Page.