Cybersecurity Administrator at JD Power in Remote

Summary: JD Power is a company dedicated to powering every auto-related decision through proprietary data and advanced analytics. They are seeking a Cybersecurity Administrator who will provide operational support across security governance and compliance activities, assisting in vendor risk management, audit coordination, and vulnerability tracking. Responsibilities: - Manage inbound security questionnaires/RFIs and coordinate inputs across IT, Legal, Engineering, and other stakeholders - Maintain and continuously improve a centralized library of standardized, policy-aligned security responses - Track questionnaire/RFI status, deadlines, and follow-ups to ensure accurate, on-time delivery - Support the end-to-end third-party vendor risk lifecycle, including onboarding, periodic reviews, and offboarding - Conduct vendor security risk assessments using established frameworks and questionnaires (e.g., SIG, CAIQ, custom templates) - Maintain the vendor risk register, including risk ratings, evidence requests, remediation actions, and review schedules; escalate high-risk findings - Coordinate audit readiness activities (e.g., SOC 2 Type II, TISAX, internal audits), including continuous evidence collection and audit calendars - Serve as a point of contact during audit fieldwork by scheduling walkthroughs, gathering artifacts, and tracking auditor requests - Track audit findings and management responses and follow remediation commitments through closure; help update control narratives, policies, and procedures - Monitor and track vulnerabilities (scans, penetration tests, threat intel), maintain the vulnerability register, drive follow-ups, and produce status reporting Required Qualifications: - Bachelor's degree in Information Security, Computer Science, Information Systems, or a related field — or equivalent practical experience - 1–2 years of experience in information security, IT compliance, risk management, or a related discipline - Familiarity with common compliance frameworks and standards such as SOC 2, ISO 27001, TISAX, NIST, or similar - Strong organizational skills with the ability to manage multiple workstreams, deadlines, and stakeholders simultaneously - Excellent written and verbal communication skills — able to translate technical concepts for non-technical audiences - Detail-oriented with a structured, process-driven approach to work - Proficiency in standard productivity tools (Microsoft 365, Google Workspace) and experience with spreadsheets and tracking tools - Entry-level security certification or active pursuit thereof: CompTIA Security+, CC (ISC²), or equivalent - Understanding of cloud security concepts (AWS, Azure, or GCP environments) - Understanding / Experience supporting external audits or regulatory examinations Required Skills: Information Security, IT Compliance, Risk Management, SOC 2, ISO 27001, TISAX, NIST, CompTIA Security+, Certified Information Systems Security Professional (CISSP), Cloud Security AWS, Cloud Security Azure, Cloud Security GCP, Audit Management, Vendor Risk Management, Vulnerability Management