Baker Hughes

Cyber Security Specialist - Regulatory Compliance

Reposted Yesterday

Be an Early Applicant

4 Locations

In-Office

Senior level

Energy

The Role

Supports product cybersecurity regulatory compliance and certification readiness across digital products. Maintains unified control frameworks, prepares SOC 2 and regulatory evidence packs, coordinates audits and remediation, assesses product obligations under SOC 2, NIS2, the EU AI Act, and EU Cyber Resilience Act, and produces leadership reports on certification readiness, audit trends, evidence maturity, and compliance risks.

Summary Generated by Built In

Cyber Security Specialist - Regulatory Compliance

Are you passionate about being part of a successful team?

Are you excited by the prospect of working for an industry leader in Energy Technology?

Join our team!

Our team provides industry-leading products and services that optimize the extraction, production, and processing of energy. We help a diverse range of customers across the value chain to reduce operating costs and improve productivity. Our team plays an integral role by helping the business plan for the future.

Partner with the best

The Cyber Security Specialist - Regulatory Compliance supports the development and operation of the Product Certification Center of Excellence (COE) by aligning IET digital products to regulatory, certification, and security‑governance requirements. The analyst partners closely with product engineering teams, product cybersecurity, and GRC headquarters to build reusable evidence packs, support SOC2 certifications for Cordant, Inspection works, and future IET digital products, and strengthen the global response model for customer product‑related audits and inquiries. The role ensures that unified control frameworks, regulatory mappings, and product evidence repositories are accurate, consistent, and positioned for leadership review

As a Cyber Security Specialist - Regulatory Compliance, you will be responsible for

Assisting with the maintenance and execution of unified, product‑focused control frameworks integrating SOC2, EU AI Act, EU Cyber Resilience Act, and other relevant regulatory expectations for digital products.
Assisting in preparing evidence, coordinating with product teams, tracking remediation, and ensuring audit preparedness for Cordant and Inspection Works certifications.
Preparing standardized, reusable product evidence packs covering SOC2, AI Act/CRA applicability, security architecture, privacy metadata, and other product compliance artifacts
Operating within the structured engagement model for product‑related customer audits, RFP questionnaires, compliance surveys, and security assessments, ensuring high‑quality, complete, and timely responses
Supporting the execution of assessments of product‑level compliance requirements under SOC2, NIS2 (product‑relevant dependencies), EU AI Act, and EU CRA, driving clarity on product‑specific obligations and gaps
Collaborating with product engineering, cybersecurity, and architecture teams to gather evidence, clarify control ownership, and ensure product lifecycle decisions align to governance expectations.
Preparing concise reports summarizing certification readiness, customer audit trends, evidence maturity, and cross‑product compliance risks for review by IET leadership and GRC HQ

Fuel your passion

To be successful in this role you will:

Have a bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering with equivalent experience of minimum 8 years
Have a familiarity with NIST CSF 2.0 and ISO/IEC 27001 or equivalent framework
Have a collaborative working style and ability to partner effectively with product managers, architects, product cyber, and GRC HQ.
Have an experience building structured evidence repositories and certification playbooks.
Have a proactive problem‑solver with attention to accuracy, traceability, and governance discipline.
Have a comfortable working across multiple products with varying maturity and regulatory scope.

Work in a way that works for you

We recognize that everyone is different and that the way in which people want to work and deliver at their best is different for everyone too. In this role, we can offer the following flexible working patterns:

Please talk to us about the specific working patterns available when you apply

Working with us

Our people are at the heart of what we do at Baker Hughes. We know we are better when all of our people are developed, engaged and able to bring their whole authentic selves to work. We invest in the health and well-being of our workforce, train and reward talent and develop leaders at all levels to bring out the best in each other.

Working for you

Our inventions have revolutionized energy for over a century. But to keep going forward tomorrow, we know we have to push the boundaries today. We prioritize rewarding those who embrace change with a package that reflects how much we value their input. Join us, and you can expect:

Contemporary work-life balance policies and wellbeing activities
Comprehensive private medical care options
Safety net of life insurance and disability programs
Tailored financial programs
Additional elected or voluntary benefits

The Baker Hughes internal title for this role is: Digital Technology Senior Specialist - Regulatory Compliance

Skills Required

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or Engineering with equivalent experience
Minimum 8 years of experience
Familiarity with NIST CSF 2.0 and ISO/IEC 27001 or an equivalent framework
Ability to collaborate with product managers, architects, product cybersecurity teams, and GRC headquarters
Experience building structured evidence repositories and certification playbooks
Attention to accuracy, traceability, and governance discipline
Ability to work across multiple products with varying maturity and regulatory scope

Baker Hughes Compensation & Benefits Highlights

The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Baker Hughes and has not been reviewed or approved by Baker Hughes.

Retirement Support — Feedback suggests retirement contributions combine automatic employer funding with a dollar‑for‑dollar match, with immediate vesting on the match. This structure can meaningfully increase savings for employees who participate consistently.
Equity Value & Accessibility — Feedback suggests a discounted employee stock purchase program with regular purchase periods and no brokerage fees provides accessible ownership upside. Program parameters are clearly laid out through the benefits hub and plan materials.
Leave & Time Off Breadth — Feedback suggests exempt staff have flexible, manager‑approved time off while non‑exempt employees accrue vacation and receive paid personal time. Company‑paid holidays and paid parental leave further broaden time‑away options.