Cyber Security Expert (Automotive domain)

Position/ Role: Project Security and Privacy Manager

Job Type: Full time

Total Work Experience: 5 - 15 Years; Automotive Security Experience: 3-10 Years

Work Location: Bangalore (Electronics City, Phase II)

Immediate joiners preferred.

• Plans and organizes automotive ISO 21434 security related work products for a project.
• Acts as interface to other domains for all Security or Privacy aspects.
• Defines and gets agreement upon the mechanisms/requirements that will help to ensure Security of the product and Privacy of its users.
• Aligns development interface agreement for Security and Privacy with customer and suppliers.
• Prepares and conducts Security Assessments at various stages of Product Life cycle.
• Performs Impact Analysis and Security and Privacy Risk Assessments

Skill set required:

1. Knowledge in Automotive Security (ISO 21434, IT security, SW, HW, System) and Data Protection (privacy regulation)
2. Knowledge in Automotive Architectural modelling and Requirement Engineering
3. Knowledge in Automotive Security & Privacy standard, methods, and approaches
4. Knowledge in Automotive technical risk analyses, e. g. TARA, STRIDE, Security FMEA, . . .
5. Good Exposure to Automotive product development project life cycle
6. Working knowledge of DOORS, Rhapsody, JIRA, JAZZ, SCM and HEP landscape

The detailed description is as follows:

1. The PSPM will plan and organize the security-related aspects and their work products for a specific component project.
2. The PSPM will act as the interface to other level PFSMs, system architect, project team and customer for all security or privacy aspects regarding the full chain of effect of dedicated system level.
3. The PSPM will define the security and privacy work products, track their status and prepare reports about the maturity and proactively communicate risks to the project manager.
4. The PSPM will also care for an adequate training status of the development team to ensure that security and privacy concepts are chosen and implemented according to the state-of-industry-and-art.
5. The PSPM is responsible to define and agree upon the mechanism that will help to ensure security of the product and the privacy of its users.
6. The PSPM will closely work together with the system architect to support a common understanding within the development team, deriving a system and software security architecture.
7. As Cyber Security Production Manager (CySPro) the PSPM discuss, analyze, collaborate, communicate between R&D, production, KMD and OTC backend and define the security relevant content of the product test specification and the Cybersecurity configuration.
8. In case the PSPM is allocated as Security and Privacy Maintenance Manager (SPMM), he/she has role to manage and coordinate all SP Maintenance activities throughout all phases of SP Maintenance
9. In a security relevant project there might be the need to exchange business critical secret information from the OEM to Continental and within Continental. As Project Secret Information Manager (PSIM) the PSPM will act as trusted contact person for the OEM and take care for appropriate distribution of required business critical information according state-of-the-art IT security standards.
10. The PSIM will closely work together with the BU IT Security Advisor.