Cybersecurity Compliance Analyst

Ford • , MI,US

2d • $86,600 - $166,200 • Remote

About The Position

The Enterprise GRC (Governance, Risk, and Compliance) team functions as a second line of defense, supporting the development and maintenance of Enterprise Technology (ET) risk management and compliance activities. This Analyst role supports the Cyber GRC Compliance & Certification Service Manager in executing day-to-day compliance, certification, and risk management activities across global and regional (EU/Germany) frameworks, including ISO 27001, SOC 2, NIST CSF GDPR, and other automotive-industry-specific standards. This is a hands-on execution role, ideal for someone building foundational GRC expertise while contributing to certification lifecycle management, evidence collection, control monitoring, and regulatory reporting support.

Requirements

• Foundational knowledge of information security risk management, governance, and compliance principles and practices.
• Basic understanding of information systems auditing, control monitoring, and risk assessment concepts.
• Strong research and data-gathering skills, with the ability to synthesize information from internal and external sources.
• Ability to define problems, collect and analyze data, and draw clear, well-supported conclusions.
• Clear written and verbal communication skills, with the ability to translate technical information for varied audiences.
• Strong organizational skills and attention to detail, particularly with sensitive or confidential information.
• Ability to learn quickly, adapt to new tools/frameworks, and work effectively in a fast-paced, evolving environment.
• Good collaboration and stakeholder support skills; customer-service mindset.
• Eagerness to build functional GRC expertise and grow into more senior compliance/certification roles.
• Bachelor's degree in IT, Cybersecurity, or a relevant business discipline.
• 2–4 years of relevant IT, security, or compliance experience.
• Strong Excel/PowerPoint skills for reporting and documentation support.

Nice To Haves

• Exposure to security frameworks such as NIST or ISO preferred.
• Experience supporting audits, assessments, or compliance projects is a plus.
• Familiarity with GDPR or other EU regulatory requirements is advantageous but not required.

Responsibilities

• Support the Service Manager in maintaining relationships with OGC, the application teams and other across the shared services teams, by preparing documentation, tracking action items, and coordinating meeting logistics.
• Assist in the collection, organization, and validation of evidence artifacts, metrics, and control documentation required for the Global IT risk management framework.
• Help monitor information security controls on an ongoing basis and flag deviations, gaps, or emerging risks to the Service Manager for escalation to the global GRC team.
• Coordinate the annual risk assessment process for selected applications by gathering data, coordinating stakeholder input, and drafting supporting documentation.
• Contribute to the preparation of annual reports and governance materials, including drafting content and compiling data for C-level presentations.
• Assist in disseminating GRC training materials and coordinating regional awareness sessions, including scheduling, content adaptation, and tracking participation.
• Maintain and update trackers/logs of newly identified IT risks and compliance gaps, ensuring accurate documentation before escalation to the global GRC team.
• Support certification lifecycle activities (e.g., audit scheduling, evidence readiness checks, tracking remediation actions) for relevant frameworks.
• Conduct research on regional regulatory requirements and summarize findings to support the Service Manager's representation of regional needs within the global team.
• Assist with ad hoc reporting, data analysis, and documentation requests from internal stakeholders, auditors, or the global GRC team.

Benefits

• Immediate medical, dental, vision and prescription drug coverage
• Flexible family care days, paid parental leave, new parent ramp-up programs, subsidized back-up child care and more
• Family building benefits including adoption and surrogacy expense reimbursement, fertility treatments, and more
• Vehicle discount program for employees and family members and management leases
• Tuition assistance
• Established and active employee resource groups
• Paid time off for individual and team community service
• A generous schedule of paid holidays, including the week between Christmas and New Year’s Day
• Paid time off and the option to purchase additional vacation time.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level