Sr. Cybersecurity Analyst, ComplianceNew Newark, CA

$119,600 - $164,450/Yr

Lucid Motors - Newark, CA

Full-time - Mid Level

Newark, CA

Transportation Equipment Manufacturing

About the position

The Senior Cybersecurity Analyst, Compliance at Lucid is responsible for ensuring adherence to various regulatory compliance requirements, particularly SOX ITGC requirements. This role involves collaboration with cross-functional teams, including IT, Internal Audit, and Legal, to implement and monitor cybersecurity controls effectively. The position aims to support the organization in maintaining compliance with cybersecurity policies and standards while managing audit requests and assessments.

Responsibilities

• Provide support to process and control owners and cross-functional teams to ensure controls are designed and implemented effectively.
• Lead efforts to coordinate the implementation of new regulatory requirements or expansion of in-scope applications and systems as required.
• Participate in annual walkthroughs with process and control owners across the company and internal/external auditors.
• Coordinate the response to audit requests and other internal/external reviews/assessments performed as needed.
• Update and maintain the cybersecurity controls library to remain compliant with regulatory requirements.
• Monitor compliance with cybersecurity policies and standards, including periodic reviews and/or control testing.
• Ensure timely and accurate notification and escalation of actual or potential non-compliance risks to key stakeholders.
• Collect metrics for reporting and monitoring compliance with policies and standards, processes, and controls.

Requirements

• 5+ years of experience consulting or working in IT and Cybersecurity compliance management.
• Bachelor's degree or equivalent industry experience; post-Graduate degree is preferred.
• Strong understanding of risk, compliance, and ability to define and operationalize IT and Cybersecurity processes and controls.
• Significant audit and advisory-related SOX ITGC experience including driving control design and implementation with engineering, business, and accounting/finance teams.
• Competency in cybersecurity frameworks including ISO 27001, NIST CSF, NIST 800-53, and PCI.
• Certified in one or more of the following: CRISC, CISA, CISM, CISSP, SANS GIAC Security Certifications, etc.
• Experience with managing and supporting a variety of support inquiries, projects, initiatives, and process improvements related to regulatory compliance, governance, and audits.
• Ability to communicate and present compliance risks concisely and effectively based on the appropriate level of management and stakeholder groups.
• Ability to work well in a demanding, dynamic environment, and meet overall objectives.
• An understanding of and implementation experience with GRC tools (e.g., ServiceNow, RSA Archer, AuditBoard, etc.) is preferred.
• Excellent interpersonal skills with the ability to communicate effectively verbally and in writing with all levels within the organization, including both technical and non-technical personnel.

Nice-to-haves

• Automobile and/or manufacturing industry experience is a plus.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Life insurance
• Disability insurance
• Vacation
• 401k
• Equity program participation
• Discretionary annual incentive program