CISO Head - IT Security

Role Purpose

The Chief Information Security Officer (CISO) is responsible for defining and leading the organization's enterprise-wide cybersecurity strategy, governance, risk management, and compliance. The role safeguards the organization's digital assets, connected products, manufacturing operations, and business platforms while enabling business growth, smart manufacturing, and software-defined vehicles through secure and resilient technologies.

Key Responsibilities

Cybersecurity Governance & Risk

• Define and execute the enterprise cybersecurity vision, strategy, and multi-year roadmap.
• Establish cybersecurity policies, standards, governance, and enterprise risk management frameworks.
• Ensure compliance with applicable global cybersecurity regulations and standards, including ISO/SAE 21434, UNECE R155/R156, ISO 27001, TISAX, IEC 62443, AIS-189, and AIS-190.
• Lead enterprise cyber risk assessments, audits, and regulatory readiness.

Enterprise, Product & Manufacturing Security

• Oversee cybersecurity across Enterprise IT, Cloud, Digital Platforms, Manufacturing (OT), Connected Vehicles, and Product Engineering.
• Drive secure product development, TARA, OTA security, ECU security, PKI, and connected vehicle cybersecurity.
• Strengthen OT/ICS security for MES, SCADA, PLCs, Industrial IoT, robotics, and plant networks.

Security Operations & Resilience

• Lead Security Operations Center (SOC), threat detection, vulnerability management, incident response, cyber crisis management, and business resilience.
• Implement modern security capabilities including Zero Trust, IAM, PAM, MFA, SSO, endpoint protection, and cloud security.

Supplier & Ecosystem Security

• Establish third-party cybersecurity governance across suppliers, engineering partners, and technology vendors.
• Integrate cybersecurity requirements into procurement, product development, and supply chain management.

People & Culture

• Build a high-performing cybersecurity organization.
• Promote cybersecurity awareness, accountability, and capability development across the enterprise.