Senior Risk Analyst

Tenneco is one of the world's leading designer, manufacturers and marketers of automotive products for original equipment and aftermarket customers, with approximately 78.000 team members working at more than 300 sites worldwide. Through our four business groups, Motorparts, Ride Performance, Clean Air and Powertrain, Tenneco is driving advancements in global mobility by delivering technology solutions for diversified global markets, including light vehicle, commercial truck, off-highway, industrial, motorsport and the aftermarket.

The IT Risk Analyst will report to a Risk Manager in the Information Security department, and is responsible for identifying, analyzing, tracking, and reporting on risks to information assets. This position has global responsibility for executing components of the Risk Management Program including third-party and supply chain risk management, TISAX program, customer compliance, data protection, and policy exception. The Analyst will assist with appropriate risk management processes to identify and treat risk.

Essential Duties and Responsibilities:

• Support third-party and supply chain risk assessment and treatment
• Process day to day intake for 3rd party risk management
• Assist with defining and improving the Information Security governance frameworks, support yearly maturing and gap assessments
• Support scoping and prioritization of proposed IT projects generated from the Risk Management program's internal assessments
• Assist with managing the Risk Register, tracking and regularly reporting status on the documentation and treatment of identified risks within the register
• Support internal reviews against Customer Compliance requirements Support projects throughout the enterprise by identifying information risks and potential solutions
• Support reviews of requested exceptions to policy
• Support TISAX program
• Identify opportunities for automation and process improvement

Required Skills:

• Ability to execute Risk Management duties for the described components of the Program
• Working knowledge of Risk Management and/or Audit programs
• An understanding of IT and Information Security frameworks (e.g., NIST CSF, ISO 27001, COBIT, TISAX)
• An understanding of data protection concepts and technical enforcement capabilities
• Analytical judgment and decision-making skills
• Excellent written and verbal communications skills
• Ability to effectively interface with the management and other groups to convey and understand risks facing the organization
• Ability to adjust to changing priorities while multitasking effectively

Qualifications

• Prefer degree in Information Security and Risk Management, Information Systems, Privacy, Audit, Cyber Security or related major
• CGRC, CRISC, NIST, CISA, CGEIT or other related certifications are preferred
• 3 - 5 years+ in a related Risk Management, Audit, or IT function

An Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.