(Sr.) IT Compliance Analyst，Information Security

THE ROLE

This role will work as (Senior) Analyst role to support IT Risk and Compliance lead (China & APAC) in Information Security area, to effectively collaborate with stakeholders to develop policies/processes, leading program launch/implementation, identify issues and risks, suggesting risk remediation strategies and driving towards compliance.

RESPONSIBILITIES

Develop and maintain Tesla Information Security policies, frameworks, guidance and metrics based on internal, domestic and industrial information security regulations and standards, such as ISO27001, ISO27701, NIST, etc.

Collaborate with Product owners, Engineers, and Business process owners, and system owners to ensure security process are well established and followed.

Lead/Support in compliance programs across Cybersecurity and Data Security areas as well as new tech (such as AI, LLM) compliance.

Work on documenting and reporting control deficiencies upon discussion with business owners, Internal Auditors and collaborate with business owners regarding recommendations to address the root cause of issues and report support implementation of management remedial actions.

REQUIREMENTS

Must Qualifications

Ability to conduct regulation research, interpretation, compliance assessment, root cause analysis, risk identification, working paper preparation and can handle internal reporting within the team or working level stakeholders independently.

5 to 8 years of working experience in house or from consultancy/accounting firm, with hands-on experience in any two areas mentioned below:

-  Cybersecurity Law (CSL) compliance

-  Data Security/Protection Law compliance

- ISMS/ISO 27001 implementation and operation

- ISO 42001 standards, and

- China domestic artificial intelligence standards or regulations

With at least Bachelor’s degree in Computer Science, Information System management, or equivalent majors.

Working efficiency in English and Chinese (both speaking and written).

Good communicator and able to articulate requirements and expectations.

Collaborative in nature, result oriented, and highly self-motivated to bring task forward with a quality delivery.

Preferred Qualifications

Oversea education or working experience

Experience in supplier security management

Experience in regulatory enquiry, request or audit handling

Experience in Automotive, Financial Industry (Insurance, leasing or loan)

Certification of CISA, CRISC, CISM, CISSP, CIPM