Description

Develop and implement a comprehensive cyber security strategy and roadmap that aligns with ISO/SAE 21434:2021 and other relevant industry standards. Establish cyber security policies, procedures, and guidelines to protect our automotive systems and data throughout their lifecycle. Conduct cyber security risk assessments to identify potential risks and vulnerabilities in our systems and develop risk mitigation strategies. Define and implement appropriate cyber security controls and measures, such as secure coding practices, cryptography, and secure communication protocols. Collaborate with cross-functional teams to ensure the integration of cyber security requirements into the system design and development processes. Conduct regular security assessments and audits to monitor and evaluate the effectiveness of implemented controls and measures. Lead incident response and recovery efforts in the event of a cyber security incident, ensuring a swift and effective response to minimize impact and restore normal operations. Stay up-to-date with the latest cyber security threats, vulnerabilities, and mitigation techniques, and proactively apply them to enhance our cyber security posture. Provide guidance and support to project teams in implementing secure development practices and conducting secure code reviews. Collaborate with external partners, suppliers, and regulatory bodies to address cyber security requirements and ensure compliance with industry standards. Plan and execute cyber security awareness and training programs to educate employees on cyber security best practices and promote a culture of security awareness. Act as a subject matter expert on cyber security matters, providing guidance and support to internal teams and stakeholders. Regularly communicate the status of cyber security activities and progress to stakeholders and management. Educational and Experience Requirements: Bachelors degree in Computer Science, Cyber Security, Information Technology, or a related field (Masters degree preferred). Minimum of 2 years of experience in the field of cyber security, preferably in the automotive industry. Demonstrated track record in developing and implementing cyber security strategies, policies, and procedures. In-depth knowledge of automotive cyber security standards, such as ISO/SAE 21434:2021 and other relevant industry standards. Experience with cyber security risk assessments and vulnerability management. Familiarity with secure software development practices and secure coding principles. Strong understanding of cryptography, authentication, and secure communication protocols. Experience in incident response and recovery, including coordination with external stakeholders. Excellent leadership, communication, and interpersonal skills. Strong problem-solving and analytical abilities. Relevant certifications such as CISSP, CISM, or GIAC certifications are highly desirable. Ability to motivate and lead globally distributed teams Network to related industry partners and universities preferred International experience preferred Fluent English skills Willing to learn and work with new technologies Competencies: Action oriented Self Development/Learning on the Fly Team oriented Customer Focus/Business Acumen Compassion Dealing with Ambiguity Drive for result Interpersonal Savvy Priority setting

Role and Responsibilities

• Develop and implement a comprehensive cyber security strategy and roadmap that aligns with ISO/SAE 21434:2021 and other relevant industry standards. Establish cyber security policies, procedures, and guidelines to protect our automotive systems and data throughout their lifecycle. Conduct cyber security risk assessments to identify potential risks and vulnerabilities in our systems and develop risk mitigation strategies. Define and implement appropriate cyber security controls and measures, such as secure coding practices, cryptography, and secure communication protocols. Collaborate with cross-functional teams to ensure the integration of cyber security requirements into the system design and development processes. Conduct regular security assessments and audits to monitor and evaluate the effectiveness of implemented controls and measures. Lead incident response and recovery efforts in the event of a cyber security incident, ensuring a swift and effective response to minimize impact and restore normal operations. Stay up-to-date with the latest cyber security threats, vulnerabilities, and mitigation techniques, and proactively apply them to enhance our cyber security posture. Provide guidance and support to project teams in implementing secure development practices and conducting secure code reviews. Collaborate with external partners, suppliers, and regulatory bodies to address cyber security requirements and ensure compliance with industry standards. Plan and execute cyber security awareness and training programs to educate employees on cyber security best practices and promote a culture of security awareness. Act as a subject matter expert on cyber security matters, providing guidance and support to internal teams and stakeholders. Regularly communicate the status of cyber security activities and progress to stakeholders and management. Educational and Experience Requirements: Bachelors degree in Computer Science, Cyber Security, Information Technology, or a related field (Masters degree preferred). Minimum of 2 years of experience in the field of cyber security, preferably in the automotive industry. Demonstrated track record in developing and implementing cyber security strategies, policies, and procedures. In-depth knowledge of automotive cyber security standards, such as ISO/SAE 21434:2021 and other relevant industry standards. Experience with cyber security risk assessments and vulnerability management. Familiarity with secure software development practices and secure coding principles. Strong understanding of cryptography, authentication, and secure communication protocols. Experience in incident response and recovery, including coordination with external stakeholders. Excellent leadership, communication, and interpersonal skills. Strong problem-solving and analytical abilities. Relevant certifications such as CISSP, CISM, or GIAC certifications are highly desirable. Ability to motivate and lead globally distributed teams Network to related industry partners and universities preferred International experience preferred Fluent English skills Willing to learn and work with new technologies Competencies: Action oriented Self Development/Learning on the Fly Team oriented Customer Focus/Business Acumen Compassion Dealing with Ambiguity Drive for result Interpersonal Savvy Priority setting