Audit Role - Cyber Security (5-13 yrs)

Cyber security - Auditing

ASPICE/ASPICE Cybersecurity:

Job Description:

- Define, monitor and support deployment in cooperation with Engineering and Methodology team.

- Identify plans for Continuous improvement towards Automotive SPICE and Automotive Cybersecurity compliance, to ensure the definition and maintenance of a standard process.

- Perform focused ASPICE V4.0/ASPICE Cybersecurity audits or assessment on projects and report the results to management.

- Participate in project activities to observe the ASPICE process. Participate in regular Project Reviews, Work Product Reviews.

- Participate in projects CCB meetings to share feedback and observations for the Process usage.

- Support (and contribute) project team about customer cybersecurity audit and reviews, and perform actions plan follow-up.

- Technical Support to Project team for tailoring the standards as per project need.

- Review action plans for effectiveness towards achieving target ASPICE level/ ASPICE Cybersecurity.

- Update/Create dashboards for regular status reports of his/her own assessments.

- Share with methodology the improvement done in different projects to align or update Marelli Procedure/Template to comply with ASPICE/ASPICE Cybersecurity.

Key Skills:

- Certified Automotive Spice Provisional Assessor and good knowledge in Automotive Cybersecurity (certification is added advantage).

- Experience in Automotive SPICE/ASPICE Cybersecurity deployment, involved in internal/external assessments and actions for process improvement.

- Hands on experience in ASPICE 3.1 / ASPICE V4.0 implementation up to level 3.

- Good understanding of Embedded concepts and SW Development process.

- Tools: DOORs, EA, Polyspace, Atlassian tool chain, Github/Bitbucket, etc.

Automotive Cybersecurity:

- Experienced in Automotive Cybersecurity (ISO 21434) practices deployment and assessment.

- Cybersecurity assessment experience (as per ISO 21434) is mandatory.

- Able to Perform Cybersecurity assessments independently as per ISO 21434 as per plan and report results to project team and manager.

- Good knowledge of Automotive Cybersecurity objectives (CIA), communication, network, and diagnostics concepts.

- Monitoring the actions for gaps found in CS assessment, interact with team for solution to closure.

- Good knowledge on TARA and Risk assessment methods, Cryptography primitives (Encryption and Digital certificates), Certification management and Autosar cryptostack.

- Good knowledge on Secure design, Secure coding, Secure communication, Secure boot, Secure storage, Secure flashing, Secure diagnostics and debugging.

- Mandatory to have Level1 certification as per ISO 21434 and Automotive SPICE.

Key skills:

- Good knowledge of ISO 21434 and Automotive SPICE.

- Assessment experience is mandatory for all clauses of ISO 21434.

Functional Safety Auditor role:

- The Functional Safety Auditor is responsible to audit the applied functional safety process.

Main activities/Responsibilities:

- Define check list of the functional safety relevant process (workflow, accordance with the safety plan).

- Check if each safety activity in the process has been performed properly in accordance with the development process.

- Understand the existing processes, perform functional safety (ISO 26262) audits as per plan to ensure conformance to the defined processes.

- Report the audit results to Central team and all relevant stakeholders.

- Check if each safety activity in the process has been performed properly in accordance with the development process.

- Judge if the process has been executed properly in accordance with the development process for the project.

- Closely in contact with Functional Safety team, for making FS Audit plan.

- Ensure consistent safety development process across the teams.

- Participate in Safety analysis and reviews.

- Continue to improve existing safety processes.

- Participation in FS Assessments.

- Monitoring the actions for gaps found in FS Audit, interact with team for solution to closure.

- Proficiency in safety analysis techniques, such as FMEA and DFA.

- Strong communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams and global teams.

- Must be Level1 certified functional safety engineer (ISO 26262) and ASPICE Provisional Assessor.