Job Title: Senior Security & Compliance Analyst
Company: AISIN World Corp. of America
Department: DX Infrastructure and Security
Location: Northville, MI or Seymour, IN
Position Responsibilities
The incumbent is expected to perform the following functions that the company has determined are essential to this position:
- Coordinate and support TISAX assessment, certification, and recertification activities, including control reviews, evidence collection, remediation tracking, and ongoing compliance monitoring. Support SOC audits and related compliance activities as required.
- Serve as the regional coordinator for cybersecurity compliance initiatives and assessments.
- Support the implementation, adoption, and sustainment of cybersecurity policies, standards, guidelines, and initiatives deployed by the corporate security organization in Japan.
- Work closely with affiliated companies to ensure alignment with corporate cybersecurity requirements and governance expectations.
- Act as a liaison between the regional organizations and the corporate cybersecurity team in Japan regarding security policies, compliance requirements, and security initiatives.
- Assist business units and IT teams in interpreting and implementing cybersecurity requirements and standards.
- Support internal and external cybersecurity audits, assessments, surveys, and regulatory compliance activities.
- Maintain and improve cybersecurity governance documentation, procedures, standards, and control frameworks.
- Conduct cybersecurity risk assessments and assist in the development of risk mitigation plans.
- Track, document, and report cybersecurity risks, compliance gaps, and remediation activities to management.
- Support security awareness and compliance training activities across the region.
- Monitor industry trends, regulatory requirements, and cybersecurity best practices and provide recommendations for continuous improvement.
- Collaborate with infrastructure, application, and business teams to ensure security controls are effectively implemented.
- Assist with the implementation and administration of corporate cybersecurity tools and technologies.
- Support security operations, vulnerability management, and incident response activities as required.
- Assist with Microsoft security technologies including Intune, Conditional Access, Multi-Factor Authentication (MFA), Microsoft Defender, and Exchange Online Protection.
- Support investigations of security events and assist with remediation activities when required.
- Prepare reports, metrics, and documentation related to cybersecurity compliance, TISAX readiness, and security program effectiveness.
- Other tasks and duties as assigned.
Required Skills and Abilities
Essential Skills and Experience:
- 5+ years of experience in cybersecurity, information security governance, risk management, compliance, or security operations.
- Experience supporting cybersecurity compliance programs, audits, or certification activities.
- Familiarity with cybersecurity frameworks and standards such as TISAX, ISO 27001, SOC 2, NIST CSF, and related control frameworks.
- Understanding of cybersecurity risk assessment methodologies and governance processes.
- Working knowledge of Microsoft security technologies and cloud security concepts.
- Understanding of network, endpoint, and identity security principles.
- Strong analytical and problem-solving skills.
- Strong organizational skills with the ability to manage multiple compliance and security initiatives simultaneously.
- Strong written and verbal communication skills.
- Ability to work effectively with global teams and non-technical business stakeholders.
- Ability to work independently with limited supervision.
Beneficial Skills and Experience
- Experience supporting TISAX certification or recertification activities.
- Experience working within global or multi-site organizations.
- Experience with Trend Micro Apex One, Microsoft Intune, and Entra ID.
- Experience supporting ISO 27001 or SOC audits or information security management systems.
- Knowledge of automotive manufacturing industry requirements.
- Experience coordinating cybersecurity initiatives across multiple subsidiaries or affiliated companies.
- Demonstrated commitment to continuous learning and professional development.
Education/Training/Certifications
- Bachelor's degree in IT, Cybersecurity, Information Systems, or related field, or equivalent experience.
- One or more cybersecurity-related certifications preferred:
- Security+
- SC-200
- SC-300
- CISSP
- CISM
- ISO 27001 Lead Implementer / Lead Auditor
- TISAX-related training or certification (preferred)