champion the adoption
of emerging tech

Chevron is accepting online applications for the Cyber Strategy, Planning & Governance – Cyber Regulatory Analyst position through November 14, 2025 at 11:59 p.m. (CST).

OVERVIEW

This position is part of a team which governs the policies of cybersecurity and partners with corporate compliance to maintain relevance of corporate policies for which the Chief Information Security Officer is accountable.

This position will interface with different levels within the organization, ranging from individual contributors to managers.

The Cyber Regulatory Analyst is responsible for developing and maintaining plans, cybersecurity policies, and controls to support and align Chevron’s cybersecurity expectations with regulatory compliance. This role understands Chevron’s core business and rapidly changing technology and regulatory environment, enterprise cybersecurity risks, and the role that cybersecurity plays helping protect Chevron’s digital future.

Responsibilities for this position may include but are not limited to:

• Ensure internal cybersecurity policies align with applicable regulatory, legislative, and organizational requirements
• Maintain current knowledge of evolving external regulations and cybersecurity trends, and interpret and operationalize regulatory frameworks
• Participate in research and advisory committees for evaluating how new technologies influence policy development
• Maintain effective communication with various stakeholders, including executives, employees, partners, and customers to promote cybersecurity policy awareness and alignment
• Monitor, measure, and report the effectiveness of the cybersecurity policies and guidelines to identify and address any gaps or issues as they relate to regulatory compliance
• Review and update cybersecurity policies, controls, and related guidelines regularly to reflect changes in the threat landscape, technology trends, and business needs
• Demonstrate knowledge of internal, federal, and international laws, regulations, and governance frameworks

Required Qualifications:

• Bachelor’s degree in a related field such as cybersecurity, information systems, communications, or a Bachelor’s in an unrelated field with relevant work experience.
• Minimum 3 years related work experience involving cybersecurity policy or regulatory analysis with increasing levels of responsibility
• Cybersecurity Frameworks & Standards: Familiarity with NIST CSF 2.0, NIST SP800-53, and/or ISO 27001
• Regulatory Compliance: Understanding of mandates such as TSA, USCG-MTSA and SOCI Act amendments, SOX, and how they translate into internal policy
• Stakeholder Engagement: Proven ability to work across IT and OT domains, business operations, legal, and procurement to align policy with operational needs

Preferred Qualifications:

• Industry experience incorporating oil and gas or energy sector regulatory requirements into standard processes
• Demonstrated ability to lead cross-functional initiatives and influence policy adoption across diverse teams
• Communicates in a clear, concise, understandable manner both orally and in writing with all levels, including operations, design teams, project teams, vendors, and peers.
• Experience with ServiceNow GRC
• Ability to motivate teams and adapt to working with a variety of disciplines, cultures, and environments

Relocation Options:

Relocation will not be considered.

International Considerations:

Expatriate assignments will not be considered.

Default Terms and Conditions

We respect the privacy of candidates for employment. This Privacy Notice sets forth how we will use the information we obtain when you apply for a position through this career site. If you do not consent to the terms of this Privacy Notice, please do not submit information to us.

Please access the Global Application Statements, select the country where you are applying for employment. By applying, you acknowledge that you have read and agree to the country specific statement.

Terms of Use