Compliance & Risk Management Specialist Location Dearborn, Michigan (Local Candidates Only) Schedule Monday - Friday | Standard Business Hours Type Contract | W2 Only Pay Rate $48.00 - $52.00/hour W2 Work Authorization Must be able to work on a W2 basis. No C2C, or third-party vendors. Relocation Relocation assistance is not available. Local candidates only. Duration 12 Month Long Contract (Open-ended) Summary We are seeking a Compliance & Risk Management Specialist to support cybersecurity governance, cryptographic key management, supplier compliance, and risk management initiatives within a complex automotive environment. This role serves as a key liaison between cybersecurity, engineering, manufacturing, procurement, suppliers, and infrastructure teams to ensure cybersecurity requirements are implemented and maintained throughout the vehicle development and manufacturing lifecycle. The ideal candidate will have a strong background in cybersecurity compliance, PKI, key management systems, supplier audits, risk management, and security governance. Experience supporting embedded systems, connected products, or automotive cybersecurity programs is highly preferred. Key Responsibilities Define cybersecurity and cryptographic requirements for vehicle electronic control units (ECUs) and connected systems. Establish and manage security controls including encryption standards, key lengths, certificate policies, rotation schedules, expiration requirements, and access controls. Support and manage Public Key Infrastructure (PKI) and Key Management Systems (KMS) environments. Ensure secure generation, distribution, storage, and lifecycle management of cryptographic keys and certificates. Partner with engineering teams to integrate cybersecurity controls into products and manufacturing processes. Conduct supplier cybersecurity audits and assessments to verify compliance with organizational security requirements. Identify security gaps, document findings, and drive corrective action plans with suppliers and internal stakeholders. Track supplier compliance metrics and escalate risks, issues, and non-compliance items as necessary. Develop, maintain, and improve cybersecurity governance policies, standards, procedures, and controls. Monitor compliance risks, cybersecurity vulnerabilities, and third-party security exposures. Support third-party cybersecurity risk management programs and supplier security reviews. Troubleshoot issues involving PKI, certificate management, key deployment, and manufacturing integrations. Collaborate with cybersecurity, embedded software, vehicle program teams, manufacturing, procurement, suppliers, and IT infrastructure teams. Maintain audit documentation, compliance records, and reporting materials for leadership and regulatory reviews. Support continuous improvement initiatives related to security governance, compliance, and risk management frameworks. Required Qualifications Bachelor's degree in Cybersecurity, Information Security, Computer Engineering, Electrical Engineering, Computer Science, or related field. 3+ years of experience in cybersecurity, compliance, governance, risk management, or information security. Experience with Public Key Infrastructure (PKI) and certificate lifecycle management. Experience working with Key Management Systems (KMS). Knowledge of cryptographic technologies, encryption standards, and key management principles. Experience conducting security assessments, supplier audits, or compliance reviews. Strong understanding of cybersecurity governance, risk management, and security control frameworks. Experience identifying, documenting, and remediating security and compliance risks. Strong communication and stakeholder management skills. Ability to work cross-functionally with engineering, cybersecurity, manufacturing, procurement, and supplier organizations. Experience creating policies, procedures, standards, and audit documentation. Preferred Qualifications Experience supporting automotive, manufacturing, embedded systems, IoT, or connected product environments. Knowledge of automotive cybersecurity standards such as ISO 21434 and

UNECE R155.

Experience with security frameworks including

NIST, ISO

27001, or similar standards. Familiarity with cryptographic platforms and tools such as Thales, Entrust, HashiCorp Vault, AWS KMS, or equivalent technologies. Experience supporting supplier cybersecurity programs and third-party risk management initiatives. Background in embedded software, electronic control units (ECUs), or vehicle security architectures. Relevant certifications such as CISSP, CISM, CRISC, Security+, or similar cybersecurity credentials. #INDOEM #LI-JC1