Xpetize - Cyber Security Manager (6-10 yrs)

Job Description :

Key Responsibilities :

Cybersecurity Requirements and Analysis :

- Analyze and evaluate cybersecurity requirements provided by the OEM (Original Equipment Manufacturer).

- Ensure the traceability of all cybersecurity requirements across the project lifecycle.

- Develop and maintain the cybersecurity item definition according to the product development process.

Threat Assessment and Risk Analysis (TARA) :

- Conduct comprehensive threat analysis and risk assessments to identify potential vulnerabilities and threat scenarios.

- Coordinate with relevant teams to remediate identified risks and integrate security measures effectively.

Cybersecurity Concept Development :

- Create detailed cybersecurity concepts, including :

1. Item definition

2. Threat assessment and risk analysis

3. Cybersecurity concept

4. Cybersecurity case document

5. Collaborate with system and software architects to develop fortified cybersecurity solutions.

Incident Response and Testing :

- Manage security incident responses, including analysis of vulnerabilities and coordination of remediation actions.

- Provide guidance on cybersecurity testing strategies, methodologies, and results.

Lifecycle Management :

- Maintain cybersecurity-specific work products throughout the entire project lifecycle.

- Participate in key processes such as change request management, configuration management, and problem resolution management.

- Align cybersecurity planning and execution with overall project management.

Key Skills and Qualifications :

Technical Expertise :

- Strong knowledge of cybersecurity standards such as ISO/SAE 21434, NIST Cybersecurity Framework, and IEC 62443.

- Hands-on experience in performing threat analysis and risk assessments (TARA).

- Expertise in developing cybersecurity concepts and cases.

- Proficiency in secure system and software architecture design.

- Familiarity with cryptographic protocols, secure coding practices, and vulnerability management.

- Proficiency in cybersecurity tools like Wireshark, Nessus, Metasploit, or similar tools.

- Experience with requirement traceability tools such as IBM DOORS, JIRA, or equivalent.

- Knowledge of network security principles, firewalls, and intrusion detection systems.

- Familiarity with programming languages like C/C++, Python, or Java for secure software development.

Soft Skills :

- Strong analytical and problem-solving abilities.

- Excellent communication skills to liaise with cross-functional teams and external stakeholders.

- Ability to manage multiple tasks and meet tight deadlines.

- Detail-oriented mindset with a focus on maintaining high-quality cybersecurity deliverables.

Preferred Qualifications :

- Degree in Computer Science, Information Security, or a related field.

- Certifications such as CISSP, CISM, CEH, or equivalent are highly desirable.

- Prior experience in the automotive or embedded systems industry is a plus.