Senior Security & Compliance Analyst

Job Title: Senior Security & Compliance Analyst

Company: AISIN World Corp. of America

Department: DX Infrastructure and Security

Location: Northville, MI or Seymour, IN

Position Responsibilities

The incumbent is expected to perform the following functions that the company has determined are essential to this position:

• Coordinate and support TISAX assessment, certification, and recertification activities, including control reviews, evidence collection, remediation tracking, and ongoing compliance monitoring. Support SOC audits and related compliance activities as required.


• Serve as the regional coordinator for cybersecurity compliance initiatives and assessments.


• Support the implementation, adoption, and sustainment of cybersecurity policies, standards, guidelines, and initiatives deployed by the corporate security organization in Japan.


• Work closely with affiliated companies to ensure alignment with corporate cybersecurity requirements and governance expectations.


• Act as a liaison between the regional organizations and the corporate cybersecurity team in Japan regarding security policies, compliance requirements, and security initiatives.


• Assist business units and IT teams in interpreting and implementing cybersecurity requirements and standards.


• Support internal and external cybersecurity audits, assessments, surveys, and regulatory compliance activities.


• Maintain and improve cybersecurity governance documentation, procedures, standards, and control frameworks.


• Conduct cybersecurity risk assessments and assist in the development of risk mitigation plans.


• Track, document, and report cybersecurity risks, compliance gaps, and remediation activities to management.


• Support security awareness and compliance training activities across the region.


• Monitor industry trends, regulatory requirements, and cybersecurity best practices and provide recommendations for continuous improvement.


• Collaborate with infrastructure, application, and business teams to ensure security controls are effectively implemented.


• Assist with the implementation and administration of corporate cybersecurity tools and technologies.


• Support security operations, vulnerability management, and incident response activities as required.


• Assist with Microsoft security technologies including Intune, Conditional Access, Multi-Factor Authentication (MFA), Microsoft Defender, and Exchange Online Protection.


• Support investigations of security events and assist with remediation activities when required.


• Prepare reports, metrics, and documentation related to cybersecurity compliance, TISAX readiness, and security program effectiveness.


• Other tasks and duties as assigned.

Required Skills and Abilities

Essential Skills and Experience:

• 5 years of experience in cybersecurity, information security governance, risk management, compliance, or security operations.


• Experience supporting cybersecurity compliance programs, audits, or certification activities.


• Familiarity with cybersecurity frameworks and standards such as TISAX, ISO 27001, SOC 2, NIST CSF, and related control frameworks.


• Understanding of cybersecurity risk assessment methodologies and governance processes.


• Working knowledge of Microsoft security technologies and cloud security concepts.


• Understanding of network, endpoint, and identity security principles.


• Strong analytical and problem-solving skills.


• Strong organizational skills with the ability to manage multiple compliance and security initiatives simultaneously.


• Strong written and verbal communication skills.


• Ability to work effectively with global teams and non-technical business stakeholders.


• Ability to work independently with limited supervision.

Beneficial Skills and Experience

• Experience supporting TISAX certification or recertification activities.


• Experience working within global or multi-site organizations.


• Experience with Trend Micro Apex One, Microsoft Intune, and Entra ID.


• Experience supporting ISO 27001 or SOC audits or information security management systems.


• Knowledge of automotive manufacturing industry requirements.


• Experience coordinating cybersecurity initiatives across multiple subsidiaries or affiliated companies.


• Demonstrated commitment to continuous learning and professional development.

Education/Training/Certifications

• Bachelor's degree in IT, Cybersecurity, Information Systems, or related field, or equivalent experience.


• One or more cybersecurity-related certifications preferred:
  
  
  
  • Security
  
  
  • SC-200
  
  
  • SC-300
  
  
  • CISSP
  
  
  • CISM
  
  
  • ISO 27001 Lead Implementer / Lead Auditor
  
  
  • TISAX-related training or certification (preferred)