Cyber Security Manager

Position Summary

He/she shall monitor and review the cyber security status of the project to ensure that compliance to ISO21434 has been achieved during and after product development. He/She will perform internal cyber security audit and assessment challenging the engineering team to ensure adherence and compliance to Garrett cyber security processes. Supports definition of Garrett cyber security engineering and management process.

Key Job Areas of Responsibilities

1. Cyber Security Management

• Performing independent reviews in line with ISO21434 and other applicable requirements.

• Support the execution of cyber security assessments and audits as per agreement with the internal and external stakeholders.

• Responsible to monitor and report cyber security status of the project where he/she is allocated.

• Identify and escalate deviations to the ISO21434 in projects by proposing mitigation and corrective actions.

• Conducting periodical alignments and reviews of cyber security plan with cyber security manager to be reported in cyber security scorecard of the project.

• Challenging cyber security status of the project during Design Reviews and in correspondence of NPI phase gate exits to ensure the achievement of cyber security maturity targets and the identification of gaps may represent blocking points to ensure compliance to ISO21434

• Collecting project cyber security Lesson Learnt to ensure Garrett cyber security processes improvements.

• Lead the identification of cyber security risks on each delivered product configuration of the involved project by reporting status and risks to the manager.

• Defining internal cyber security KPI to monitor project status.

• Supporting the definition of cyber security engineering and management processes according to ISO21434.

• Supporting cyber security engineering process GAP analyses vs ISO21434

• Being in contact with cyber security community to keep adequate level of standard knowledge in the company.

• Performing internal cyber security training sessions to establish and maintain skills and knowledge in the company.

2. Cyber Security coaching and mentoring

• Ensure continuous improvement by identifying and collecting Lessons Learnt from the projects and ensuring their application in other relevant projects.

• Support cyber security management process and cyber security engineering process GAP analyses vs ISO21434

• Support cyber security teams to ensure compliance in projects.

• Ensure cyber security skills in project teams,

• Provides coaching to the all stakeholders in Cyber Security.

3. Cyber Security organizational status reporting to management

• Provides recurring assessment of the project status in terms of cyber security, as per the defined plan.

• Ensure resolution of non-conformance and prevent recurrence.

• Report project cyber security status and risks to the project stakeholders and managers.

Education / Qualifications

• Masters degree in Electronic Engineering, Computer or technical equivalent

• Cyber Security Manager certification

Experience

• At least 8 years of automotive experience

• At least 2 years experience in ISO21434 roles

• At least 5 years experience with embedded SW products

• Experience with electric products (preferably automotive)

• Experience in electric product system architecture definition (electric, electronics, software)

Key Skills and Knowledge

• ISO21434 deep and practical knowledge, good knowledge of ASPICE, APQP and OEM/TIER1 typical product development and milestones.

• Agile development principles

• Requirements and SW development tools (JAMA, JIRA) and PM tools (MSP)

• Ability to interface customers (OEMs) and suppliers (TIER2)

• Demonstrated capability for action/initiative, customer focus, and a strong capability to lead in a team environment.

• Proven problem-solving skills, including ability to interpret data, define actions, and implement solutions

• Executive oriented communication style

• English written and oral communication skills

What We Offer:

• Competitive salary and benefits

• Hybrid work model (2 days WFH)

• Transparent and Collaborative Work Environment

• Global Collaboration and Learning Opportunities