Product Cybersecurity & Compliance Manager

Responsibilities

POSITION OVERVIEW

We are seeking a highly skilled Product Cybersecurity & Compliance Manager to establish, harmonize, implement and oversee our product Cybersecurity (CSMS/SUMS) processes. The candidate will spearhead the implementation of our end-to-end cybersecurity lifecycle. In addition, you will oversee the continued evolution and rollout of secondary supporting frameworks, specifically ASPICE and Functional Safety (FuSa).

In this role, you will serve as the central technical authority and act as the "glue" connecting engineering, quality, manufacturing and global customers. While this position does not have direct reports, it requires robust technical leadership to guide cross-functional project teams and ensure world-class compliance. Crucially, you will have the authority to independently escalate critical concerns directly to executive leadership.

ESSENTIAL DUTIES AND RESPONSIBILITIES

Core Product Cybersecurity & Software Updates (Primary Focus)

• CSMS & SUMS Governance: Establish internal processes and lead overall corporate governance aligned with ISO 21434 and ISO 24089 standards.
• Security Work Products: Plan, support, and review critical engineering work products-including TARA (Threat Analysis and Risk Assessment), cybersecurity concepts, and verification evidence-directly alongside project teams.
• Security Operations: Manage core product security operations, including vulnerability management, incident response, and secure production software transfers.
• Ensuring implementation of adequate Product Security solutions & approved security measures

Secondary Compliance Frameworks & Integration

• Process Integration: Merge disparate engineering processes into a singular, unified framework that seamlessly supports CSMS, SUMS, FuSa, and ASPICE.
• Process Compliance (ASPICE): Oversee system and software development processes aligned with ASPICE standards. Enforce strict, bi-directional traceability from stakeholder requirements down to architecture and verification testing. Perform Software Quality Assurance (SQA) activities and lead gate reviews.
• Functional Safety (FuSa): Oversee key safety work products-including HARA, FMEA/SW FMEA, FTA, and safety concepts-ensuring all processes align with ISO 26262 standards.

Cross-Functional Leadership & Business Operations

• Cross-Functional Interface: Act as the central liaison bridging critical coordination between Engineering, Program Management, IT, Manufacturing, Quality, Purchasing, and Human Resources.
• External Stakeholder Management: Own the technical interface with global customers and suppliers. Manage Cybersecurity Interface Agreements (CIAs) and Development Interface Agreements (DIAs) to align scope, timelines, and deliverables.
• Audits & Metrics: Track and report KPIs regarding process maturity and compliance health. Conduct periodic internal audits to drive continuous improvement and coordinate external assessments to maintain global certifications.
• Business Development Support: Define customized process compliance models for new business awards based on specific customer requirements.
• Leadership & Escalation: Lead software project teams through technical guidance and exercise your independent internal leadership escalation authority to bring attention to and seek immediate support for critical issue resolution.

Qualifications

QUALIFICATIONS & REQUIREMENTS

Education

• Bachelor of Science in an Engineering field required (Electrical/Electronics, or Computer Engineering strongly preferred).

Experience

• 5+ years of direct experience in CSMS process development and governance (ISO 21434).
• Preferred 3+ years of experience in ASPICE and Functional Safety (ISO 26262) process development and compliance.

Preferred Skills & Knowledge

• Regulations & Standards: Deep understanding of UN Regulations UN R155 and UN R156, alongside a working knowledge of ISO 21434, ISO 24089, ISO 26262, and ASPICE frameworks.
• Tools: Proficiency with Application Lifecycle Management (ALM) systems such as PTC Integrity or Codebeamer; expert proficiency with Microsoft Office tools.
• Testing & Architecture: Familiarity with modern security testing methods (including fuzz testing and penetration testing), CI/CD pipelines, and Agile workflows.

• TÜV/ INTACS certified Assessor for Cybersecurity, FuSa, ASPICE

• Automotive Systems: Broad understanding of embedded software, electrical systems, vehicle communication protocols, controls, and secure design controls (e.g., secure flashing, secure communication, data management).
• Lifecycle Awareness: General understanding of hardware/mechanical design, manufacturing, quality assurance, and after-sales support.

LANGUAGE SKILLS

• Strong oral and written English language skills.
• Strong technical writing skills.
• Ability to effectively represent information and respond to questions in a meeting environment including with customers and executive leadership.