The Sr. IT Cybersecurity Governance Analyst is responsible for establishing, maintaining, and maturing the enterprise cybersecurity governance framework. This role provides structure, consistency, and oversight across policies, standards, control frameworks, and regulatory requirements to ensure alignment with business objectives, risk appetite, and external obligations. The individual leads policy and standards management, maintains the cybersecurity control framework and controls library, oversees regulatory change management, and ensures governance processes are integrated into enterprise decision-making and risk management activities.
What will you do?
- Lead development, maintenance, and periodic review of enterprise cybersecurity policies, standards, and procedures to ensure alignment with regulatory requirements, industry frameworks, and business objectives.
- Maintain the enterprise cybersecurity control framework and centralized controls library aligned to standards such as ISO/IEC 27001 and NIST SP 800-53.
- Ensure traceability between regulatory, legal, and contractual requirements and internal control objectives through structured compliance control mapping.
- Support regulatory change management activities, including identification, tracking, impact assessment, and coordination of required updates to policies, controls, procedures, and documentation.
- Maintain a centralized repository of cybersecurity requirements and governance artifacts to support auditability and regulatory examinations.
- Manage governance processes that support consistent execution of GRC activities across cybersecurity, IT, and business functions.
- Ensure cybersecurity governance practices align with enterprise risk appetite, strategic objectives, and enterprise risk management (ERM) processes.
- Partner with Risk, Compliance, Security Operations, IT, Legal, and Enterprise Risk teams to ensure governance requirements are understood and implemented effectively.
- Support leadership and executive committees by providing governance-related reporting, updates, and decision support.
- Promote consistency, accountability, and ownership across cybersecurity governance activities.
What do you need for this role?
- Associates Degree required, major in Computer and Information Science, or Management Information Systems. Bachelors Degree preferred.
- 3+ years experience in cybersecurity governance, risk, compliance, or related disciplines. .
- Strong knowledge of ISO/IEC 27001, NIST CDF, NIST SP 800-53, COBIT, or similar governance framework
- Microsoft 365
- US -ITIL V3 – Other preferred
- Experience managing regulatory requirements and supporting regulatory examinations or audits.
- Strong organizational and documentation skills with attention to detail.
- Excellent written and verbal communication skills, with ability to engage senior leadership and cross-functional stakeholders.
Skills Required
- Associate degree in Computer and Information Science, Management Information Systems, or a related field
- Bachelor's degree
- 3+ years of experience in cybersecurity governance, risk, compliance, or related disciplines
- Knowledge of ISO/IEC 27001, NIST Cybersecurity Framework, NIST SP 800-53, COBIT, or similar governance frameworks
- Microsoft 365 experience
- ITIL V3 knowledge or certification
- Experience managing regulatory requirements and supporting regulatory examinations or audits
- Strong organizational and documentation skills with attention to detail
- Excellent written and verbal communication skills with the ability to engage senior leadership and cross-functional stakeholders
The Mosaic Company Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about The Mosaic Company and has not been reviewed or approved by The Mosaic Company.
-
Healthcare Strength — Multiple medical plan options—including HDHP and traditional choices—are paired with company HSA contributions. Clinical programs and preventive resources (e.g., digital MSK care and disease‑management tools) broaden access to care.
-
Retirement Support — A 401(k) through Fidelity includes company matching contributions, a Roth option, and additional annual company contributions. This structure positions retirement benefits as a core component of the package.
-
Wellbeing & Lifestyle Benefits — A cash‑based wellness incentive program, Lyra EAP, and virtual therapies provide practical mental and physical health support. Family‑oriented resources such as parental benefit hubs and Milk Stork add everyday utility.
The Mosaic Company Insights
What We Do
Mosaic is a global leader in the crop nutrient industry — the only company with the ability to produce and deliver two vital crop nutrients, phosphate and potash, on a massive scale. Mosaic engages in every phase of crop nutrition, from the mining of resources to the production of crop nutrients, feed and industrial products for customers around the globe.
