Technical Project Manager

Job Summary

The Lead Product Cybersecurity Assurance Engineer serves as the cybersecurity focal point within the project team supporting the complete cybersecurity lifecycle from creating Product Cybersecurity Plan, Threat & Risk Assessment (TRA) through mitigation definition, creating Product Cybersecurity Action List with implementation support, cybersecurity verification planning, security test case development, verification execution, and compliance evidence generation for battery-electric mining equipment and supporting systems. The role translates cybersecurity risks and specialist guidance into practical requirements, coordinates security activities with engineering, and tracks issues through implementation and verification. Working with an external Cyber Resilience Act (CRA) consultant and product compliance colleagues, the specialist helps the team develop and maintain secure products that support safe, productive, lower-emission mining.

This role focuses on product cybersecurity for embedded and industrial products and is not an enterprise IT security role.

Key Responsibilities

• Lead and coordinate product cybersecurity activities throughout the project lifecycle, aligning deliverables, contributors, milestones, and release objectives with the project lead.
• Translate guidance from CRA consultants and product compliance teams into cybersecurity requirements, engineering actions, verification activities, and compliance evidence.
• Collaborate with systems, software, firmware, and hardware teams to identify threats, assess cybersecurity risks, define mitigations, and evaluate security implications across product architectures, interfaces, communications, remote access, software dependencies, and operational environments.
• Participate in architecture and design reviews to ensure cybersecurity measures are practical, effective, and balanced with safety, availability, performance, maintainability, and serviceability requirements.
• Maintain end-to-end traceability between cybersecurity risks, requirements, mitigations, implementation actions, verification activities, and results.
• Coordinate cybersecurity verification and validation activities, including review of findings, root-cause analysis, remediation support, retesting, and closure of cybersecurity issues.
• Review supplier cybersecurity information and software component inventories, resolving gaps that may impact cybersecurity compliance or product risk.
• Assess the cybersecurity impact of design changes, newly identified vulnerabilities, and field findings, and support remediation planning, secure update strategies, and vulnerability management processes.
• Maintain cybersecurity records, verification evidence, and compliance documentation required for product releases, audits, and CRA compliance reviews.
• Communicate cybersecurity status, risks, findings, and required decisions to project stakeholders, while promoting the adoption of secure engineering practices across the project team.
• While cybersecurity assurance, verification, and compliance remain the primary focus, contribute to software or firmware implementation and remediation activities when cybersecurity testing, assessments, or compliance findings require product changes.

Skill Requirements

Key Requirements

Must-Have Skills

• Product Cybersecurity Engineering
• Threat & Risk Assessments (TRA)
• Cybersecurity Verification & Validation
• Security Test Planning and Execution
• Embedded / Industrial Product Security
• Vulnerability Management
• Software/Firmware Development Experience
• Requirements Traceability and Compliance

Preferred

• EU CRA, IEC 62443
• Embedded Linux, Microcontrollers
• Threat Modeling, Penetration Testing, SBOM
• Industrial Equipment, Battery Systems, or Charging Solutions domain experience
• Experience range : 10-12 years

Given the nature of the role, candidates with strong hands-on experience in embedded product cybersecurity, TRA, cybersecurity V&V, and software/firmware environments will be preferred

Other Requirements

Cybersecurity Verification & Validation

Lead and support cybersecurity verification and validation activities throughout the product lifecycle to ensure cybersecurity risks, requirements, and mitigations are effectively implemented, verified, and documented.

Key Responsibilities

• Develop cybersecurity verification strategies, plans, acceptance criteria, and required compliance evidence.
• Create cybersecurity test cases and procedures based on threat and risk assessments, security requirements, mitigation measures, and regulatory obligations.
• Define and execute security-focused test scenarios, including misuse, abuse, and attack-based testing.
• Execute or coordinate cybersecurity verification and validation activities and document test results and findings.
• Support defect investigation, remediation verification, retesting, and closure of cybersecurity-related issues.
• Contribute to implementation and remediation activities, including hands-on software or firmware modifications where required to resolve cybersecurity findings.
• Maintain traceability between cybersecurity risks, requirements, mitigations, test cases, and verification results.
• Produce cybersecurity verification reports and compliance evidence supporting product releases, audits, and regulatory requirements.