IT Business Systems Analyst - GRC

Requisition ID:  91729 

Florida Power & Light Company is the largest electric utility in the U.S., providing reliable energy to nearly 12 million Floridians. With one of the nation’s most fuel-efficient, cost-effective power generation fleets and industry-leading reliability, we’re redefining what’s possible in energy. Want to be part of something powerful? Join our outstanding team and help shape the future of energy.

 

Position Specific Description

The IT Business Systems Analyst (BSA) within the Governance, Risk, and Compliance (GRC) team will play a pivotal role in enhancing NextEra Energy’s nuclear cybersecurity, compliance, and data management systems. This individual will bridge the gap between business, regulatory, and technical teams to ensure that GRC processes are scalable, data-driven, and future-ready — leveraging AI and automation to improve efficiency, decision-making, and regulatory compliance.

 

This position supports the growing operational needs of the GRC function as the company expands its nuclear portfolio and adapts to evolving federal mandates for accelerated nuclear development. 

 

Key Responsibilities 

Governance, Risk, and Compliance (GRC) 

• Serve as the primary liaison between the GRC team, IT, and plant operations to translate business and regulatory requirements into technical and process solutions. 

• Support and enhance GRC applications, tools, and dashboards used for cybersecurity, compliance tracking, and risk reporting. 

• Partner with cybersecurity and regulatory teams to ensure accurate tracking and documentation of Critical Digital Assets (CDAs) across all nuclear facilities. 

• Develop and maintain workflows that align with NRC, DOE, and NIST regulatory frameworks, ensuring systems remain compliant with evolving standards. 

• Manage user access, system configurations, and change controls within GRC and related compliance platforms. 

• Support internal and external audits by preparing data extracts, reports, and system evidence. 

 

AI and Data Integration 

• Collaborate with in-house data science teams to design and deploy AI-driven analytics that improve insight into compliance metrics, incident patterns, and risk trends. 

• Identify opportunities to automate repetitive compliance processes using AI, RPA (Robotic Process Automation), and data-driven decision engines. 

• Work with cross-functional partners to develop predictive dashboards that proactively flag compliance risks and anomalies. 

• Maintain data pipelines and integration between GRC systems, enterprise data lakes, and AI platforms to ensure accuracy and traceability of key compliance data. 

• Support proof-of-concept initiatives that explore emerging technologies (machine learning, NLP, generative AI) for compliance document analysis and regulatory change management. 

 

Business Systems Analysis 

• Gather, document, and analyze business requirements from stakeholders to design and improve GRC system functionality. 

• Translate complex compliance and cybersecurity requirements into functional system specifications and workflows. 

• Conduct system testing, user acceptance testing (UAT), and process validation to ensure system reliability and compliance. 

• Create and maintain documentation including process maps, system diagrams, standard operating procedures, and training materials. 

• Act as a subject matter expert for GRC systems, providing guidance and training to end users and stakeholders. 

 

Required Qualifications 

• Bachelor’s degree in Information Systems, Computer Science, Engineering, or related field; equivalent experience may be considered. 

• 3–6 years of experience in business systems analysis, IT governance, or compliance program support. 

• Experience with data analytics tools (Power BI, Tableau, SQL, Python, etc.) and working knowledge of AI or automation technologies. 

• Strong understanding of data governance, process optimization, and system integration principles. 

• Excellent communication and stakeholder management skills, with the ability to bridge technical and regulatory domains.