职位介绍
What to Expect
Tesla is seeking a Technology Risk & Controls Sr. Analyst to support enterprise technology risk, controls, and emerging-technology security initiatives. This role sits on the team that oversees corporate enterprise IT controls risk, regulatory controls, and emerging technology risk. You will support enterprise risk management, technology controls assessments, internal risk assessments, and controls baseline risk tiering. You will execute technology risk assessments across Tesla’s core businesses, including Robotaxi, Optimus, hardware chip design, manufacturing, engineering, and regulatory reporting requirements. The position requires identifying, evaluating, and documenting control gaps, residual risk, and remediation recommendations across diverse technology domains. You will conduct end-to-end security reviews of technology architecture supporting core business operations and help align policies with industry best practices and technical standards. This role assists with Tesla initiatives for SI hardware chip security requirements and hardware security standards. You will execute internal assessments on the use of emerging technologies such as agentic A, OT/IT resources, endpoints, APIs, and manufacturing environments. This role requires someone with experience and familiarity with traditional corporate compliance frameworks and the ability to apply these standards across emerging areas such as AI, Optimus, and chip hardware.
What You’ll Do
- Perform technology and control risk assessments across corporate IT, emerging technology, manufacturing, and related domains
- Identify, evaluate, and document control gaps, residual risk, and remediation recommendations while supporting risk reporting and escalation to leadership
- Conduct end-to-end security reviews of technology architecture and support management policies against industry best practices and technical standards
- Assess third-party security posture, control design effectiveness, and contractual security requirements
- Plan and execute internal controls testing for IT and security-related controls, document results and exceptions, and track management action plans
- Perform risk assessments related to hardware security standards and support SI hardware chip security requirements
- Execute internal assessments on agentic SI use across enterprise resources and track enterprise-level risks through remediation follow-up
What You’ll Bring
- Experience in technology risk, IT controls, cybersecurity GRC, or equivalent, with working knowledge of control assessment and testing methodologies
- Familiarity with information security management and compliance concepts such as ISO 27001, PCI DSS, Korea-ISMS, or similar frameworks
- Strong analytical, documentation, and stakeholder communication skills, with the ability to manage multiple workstreams in a fast-paced environment
- Background in manufacturing and OT security risk or controls is preferred
- Prior experience in chip security, hardware security requirements, semiconductor/AI hardware risk, or related domains is preferred
- Experience with IT controls and enterprise risk programs, including drafting and maintaining management technical security policies
- Familiarity with emerging technology risk (AI systems, robotics, hardware supply chain security) and hands-on experience translating chip/hardware security requirements into assessable risks and controls
