Working in an agile environment, the Senior Cybersecurity Analyst (Compliance

Manager) will focus on assisting with the successful achievement of specified industry-

specific certifications for the organization. This role will report to the Senior Director of

Cybersecurity Risk Management in the Enterprise Cybersecurity organization. As

a member of the team, you will contribute to compliance activities related to multiple

frameworks including ISO 27001, TISAX, and NIST CSF. The ideal candidate brings a

strong understanding of risk assessment, understanding operating effectiveness,

recommending and coordinating security controls implementation activities, and

contributing to enhance the overall compliance and cybersecurity program. In this role,

the Senior Cybersecurity Analyst (Compliance Manager) will collaborate with Enterprise

Cybersecurity and cross-functional business leaders to obtain and maintain globally

recognized information security certifications specific to the cybersecurity domain and

automotive industry for improved security, data protection, and proving assurance to

business partners as an original automotive manufacturer. The duration for this

contractor position is up to 18 months.

Core Responsibilities:

?Serve as a subject matter expert for compliance initiatives with a specific focus of

ISO 27001, and TISAX. Understands the practical application of NIST CSF.

?Assist in performing detailed assessments with a focus on risk information,

including self-assessments and working with external auditors covering

information security system and cybersecurity program maturity.

?Provide the appropriate level of support to demonstrate that has

undergone rigorous external verification and complies with the appropriate level

of information security standards within the TISAX framework.

?Assist in achieving ISO 27001 certification if its ISMS, subsequently

reducing risk and optimizing operations facilitating meeting additional compliance

requirements.

?Demonstrate the appropriate level of ownership for assigned responsibilities;

proactively identify, escalate, and resolve impactful risks and issues.

?Possess deep expertise regarding cybersecurity risk management and apply this

proficiency to initiatives, problems and opportunities.

?Develop, report and track key actionable metrics, milestones, goals, and

learnings for improvement.

?Utilize the team's JIRA board and track and report activities through closure.

?Provide input into longer-term planning activities at vertical and domain level,

work cross-functionally with diverse stakeholders.

?Execute a comprehensive compliance strategy aligned with cybersecurity

objectives and industry best practices; identify gaps and ensure compliance with

standards across the enterprise.

?Develop an executive-level dashboard to track and generate metrics reports

related to cybersecurity compliance on a recurring basis by partnering with the

appropriate teams to develop Key Risk Indicators (KRIs) to drive compliance and

deliver on overall program performance.

?Provide valuable delivery insights derived from multiple sources and

communicate metrics which teams can use to drive continuous improvement.

?Implement data quality standards, policies, and procedures to ensure accuracy,

consistency, and reliability of data assets; improve the quality of operational data

and metrics.

?Clearly communicate expectations and carefully track progress to ensure

standards are met at a systematic level; follows up to keep work on track.

?Stay updated on industry trends and best practices in risk and controls and

proactively recommend improvements to the Cybersecurity Risk Management

Program.

?Demonstrate influence; make a compelling case for change and obtain early

stakeholder buy-in.

?Seek to understand different perspectives to resolve conflict.