Global Cybersecurity Compliance Analyst (ISO Audits & TISAX)

UL Solutions; Krefeld; On-site; EUR 65,000 - 100,000; Full time

Job summary

UL Solutions in Germany seeks a Global Cybersecurity Compliance Analyst to identify, analyze, report, and ensure security controls meet ISO, NIST and TISAX requirements across the organization.

You will collaborate with IT, Legal, and risk teams to address compliance issues, document deficiencies, and drive improvement in the information security program. Extensive auditing experience is preferred.

Qualifications

• BS or MA in Business, Computer Science, Information Security, or a related field.
• 2+ years as a Certified Cybersecurity Compliance Auditor.
• 2+ years in information security, especially risk roles.
• 2+ years managing risk and compliance issues or similar.
• Technical background in IT risk and operations.
• Strong business background with risk impacts in financial/operational context.
• Experience managing information security/regulatory compliance programs and audits.
• 4+ years of regulatory compliance and information security management frameworks (ISO 27000, COBIT, NIST 800).

Responsibilities

• Identify and document compliance assessments for ISO, NIST, and TISAX requirements.
• Communicate assessment issues to owners and risk teams.
• Advise IT and Legal on control requirements and solutions.
• Identify deficiencies and maintain evidence and responses.
• Stay informed on ISO/NIST/TISAX revisions.
• Develop and monitor information security and compliance metrics for management.
• Maintain risk monitoring mechanisms and remediation status reports.
• Train ISMS managers on ISO compliance and audits.
• Coordinate with auditors and manage audit schedules.

Skills

Cybersecurity

Risk management

Auditing

Regulatory compliance

Education

BS/MA in Business, CS, Info Security

Job description

The Global Cybersecurity Compliance Analyst will be responsible for identifying, analyzing, reporting, and ensuring security processes and controls are designed, managed, and assessed for effectiveness to reduce overall compliance risks across the organization. Specializing specifically in ISO, NIST and TISAX based assessments.

Responsibilities

• Identify, document, and conduct compliance assessments and validate the effectiveness of applicable ISO, NIST and TISAX requirements across the organization
• Communicates assessment issues to team owners and custodians of information risk “Business Partners,” or information governance teams and information security teams.
• Partner with IT teams and other key stakeholders (e.g., Legal), advising both on applicable control requirements and potential solutions to address compliance issues
• Identify control deficiencies and maintain records of deficiency details including management response documentation and exposure check evidence
• Stay abreast of and proactively informed on changes and revisions to ISO, NIST and TISAX frameworks
• Assists with the evaluation of the effectiveness of the information security program by developing, monitoring, gathering, and analyzing information security and compliance metrics for management.
• Assist with developing and maintaining compliance and risk monitoring mechanisms such as Key Risk Indicators (KRI), reports on status of risk assessment, control effectiveness issues remediation and internal audit findings
• Train ISMS managers on ISO compliance requirements and how to prepare and conduct ISO audits
• Coordinate with internal and external auditors and manage audit schedules

Qualifications

• BS or MA in Business, Computer Science, Information Security, or a related field
• [2+] years as a Certified Cybersecurity Compliance Auditor
• [2+] years of work experience in information security, especially in an information cybersecurity risk role
• [2+] years of experience in managing risk and compliance issues, or similar experience managing applications, projects or systems that require identification, evaluation, and remediation if risk
• Technical background or demonstrable understanding of a range of operational and IT risks and operations
• Strong business background; experience gathering and interpreting risks and associated impacts in the context of financial and operational concerns
• Strong understanding of compliance and risk-related issues through demonstrated experience managing, information security or regulatory compliance programs, and audits
• [4+] years of experience with regulatory compliance and information security management frameworks (e.g., International Organization for Standardization [IS0] 27000, COBIT, National Institute of Standards and Technology [NIST] 800)

Desired, but not required

• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), and/or Certified Information Systems Auditor (CISA)

What we offer

Total Rewards: We understand that rewards are an important consideration as you plan the next step in your career. Salary range varies by location and local market conditions and is based on multiple factors, including job-related knowledge/skills, experience, geographical location, and other factors.

Disclaimer: This role is gender-neutral and open to all qualified applicants, regardless of gender identity or expression.

What you’ll experience working for ULS

UL Solutions has been pioneering change since 1894 and we’re still leading the way. From day one, we’ve blazed a trail protecting the planet and everyone on it. Our teams have influenced billions of products, plus services, software offerings and more. We break things, burn things and blow things up. All in the name of safety science. Join UL Solutions to be at the center of safety. To learn more about us and the work we do, visit https://www.ul.com