Location(s): Franklin, TN
Job Schedule: Full-time, Hybrid (4 days on-site)
Education Requirement: Bachelor’s Degree
Sponsorship: No
Come Drive Innovation with Us. We are looking for an Information Security Associate to join our team in Franklin, TN.
This role supports Nissan's Third-Party Risk Management (TPRM) and Information Security Governance programs by assessing vendor security risks, reviewing cybersecurity documentation, and helping ensure third-party relationships align with Nissan's security, privacy, and compliance requirements. Working closely with Procurement, Legal, Privacy, Information Security, and business stakeholders, this position plays an important role in protecting Nissan's operations while supporting practical, risk-based decision making.
A Day in the Life
Conduct Security Risk Assessment Questionnaires (SRAQs) for new and existing vendors and service providers.
Review cybersecurity attestations, certifications, and assurance reports, including SOC reports, ISO certifications, SIG questionnaires, and NIST-based attestations.
Assess vendor security controls against Nissan security requirements and industry-recognized frameworks.
Identify information security, privacy, regulatory, operational, and third-party risks.
Develop risk-based recommendations, compensating controls, remediation plans, and residual risk determinations.
Perform security reviews of contracts, Statements of Work (SOWs), Data Processing Agreements (DPAs), and other vendor-related agreements.
Partner with Legal, Procurement, Privacy, and business stakeholders to address security-related contractual concerns.
Track remediation activities and risk treatment plans through completion.
Maintain assessment documentation and support internal and external audits.
Assist with continuous improvement of third-party risk management processes and methodologies.
Build effective relationships with stakeholders involved in supplier, technology, operational, and cybersecurity risk management activities.
Who We're Looking For
We're seeking an analytical and detail-oriented professional who is interested in cybersecurity, risk management, and vendor security assessments. This individual should be comfortable reviewing documentation, evaluating risk, collaborating with stakeholders, and communicating findings in a clear and business-focused manner.
The ideal candidate is curious, organized, and eager to grow their knowledge of cybersecurity governance, regulatory compliance, and third-party risk management within a large enterprise environment.
Required:
0-2 years of experience in cybersecurity, risk management, compliance, audit, third-party risk management, or related fields.
Basic understanding of cybersecurity frameworks and standards such as NIST CSF, NIST SP 800-53, ISO 27001, SOC 2, GLBA, J-SOX, NYDFS CRR-500, LGPD, and privacy regulations.
Ability to evaluate and communicate risk in a clear, factual, and business-oriented manner.
Strong analytical, organizational, and problem-solving skills.
Ability to review contracts and identify information security, privacy, and compliance requirements.
Strong written and verbal communication skills with the ability to collaborate across technical and non-technical teams.
Ability to prioritize work effectively and manage multiple assessments simultaneously.
What You’ll Look Forward to at Nissan:
Career Growth and Continuous Learning Opportunities: Benefit from diverse career paths, cross-departmental moves, and innovative learning platforms. Enhance your skills through seminars, leadership training, and tuition reimbursement programs, all while playing a vital role in shaping the future of transportation. From day one, you'll have the support to tackle challenges and contribute to impactful solutions across our organization.
Rewards: Be supported with a Comprehensive Benefits Package, including medical, mental health, parental leave, retirement savings & unique Nissan perks, including discounts on lease vehicles as part of our Employee Lease Program and a Vehicle Purchase Program (VPP). For more information, access our Nissan Benefits Overview Guide.
Nissan is committed to a drug-free workplace. All employment is contingent upon the successful completion of drug and background screenings in accordance with Nissan policies and in compliance with federal, state, and local laws, including the California Fair Chance Act and the Los Angeles County Fair Chance Ordinance. Nissan will consider qualified candidates with arrest or conviction records for employment in a manner consistent with these laws.
It is Nissan’s policy to provide Equal Employment Opportunity (EEO) to all persons regardless of race, gender, military status, disability, or any other status protected by law. Candidates for this position must be legally authorized to work in the United States and will be required to provide proof of employment eligibility at the time of hire; Nissan uses E-Verify to validate employment eligibility.
NISSAN FOR EVERYONE
People are our most valuable assets, and diversity and inclusion are the key to maximizing the power of each individual member of our team. When everyone belongs, the power of NISSAN is undeniable. Our Corporate Diversity Initiative aims to improve business results by ensuring that our workplace and core businesses meet the unique needs of our employees and customer base.
Nissan is committed to creating a culture where everyone belongs and employees, customers, and partners feel respected, valued, and heard. We have over 10 Business Synergy Teams (BSTs) across the U.S. and Canada that connect employees – with shared characteristics or interests – build allies, and foster a company culture where all employees feel supported and included.
Nissan also values inclusion in all areas of our business as we strive to mirror the diversity of our customer base and the communities where we do business. We are committed to procuring innovative goods and services, retailing our products and communicating from a diverse perspective which will help us continue to offer our customers competitively designed, market-driven products.
Join us as we carry our commitment to diversity and inclusion into the future.
Franklin Tennessee United States of AmericaSkills Required
- Bachelor's degree
- 0-2 years of experience in cybersecurity, risk management, compliance, audit, third-party risk management, or a related field
- Basic understanding of cybersecurity frameworks and standards including NIST CSF, NIST SP 800-53, ISO 27001, SOC 2, GLBA, J-SOX, NYDFS CRR-500, LGPD, and privacy regulations
- Ability to evaluate and communicate risk clearly, factually, and in a business-oriented manner
- Strong analytical, organizational, and problem-solving skills
- Ability to review contracts and identify information security, privacy, and compliance requirements
- Strong written and verbal communication skills and ability to collaborate across technical and non-technical teams
- Ability to prioritize work and manage multiple assessments simultaneously
- Legally authorized to work in the United States without sponsorship
Similar Jobs
.png)
What We Do
Nissan is a global automotive manufacturer that designs, produces, and sells a wide range of vehicles, including cars, trucks, and SUVs, and is a key member of the Renault-Nissan-Mitsubishi Alliance.
