Cyber Security Projects Mgm Eng.

Manufacturing Commercial Vehicles (MCV)

Responsible for supporting the creation and maintenance of cybersecurity-relevant work products and coordinating automotive cybersecurity process activities within the project.

Providing comprehensive automotive cybersecurity consulting from the start to the finish of the project. This role holder may be a member of the product development team, appointed by the project manager to oversee the product life cycle, including development, production, and post-production phases

- Coordinate internal resources and third parties/vendors for the flawless execution of projects

- Ensure that all cybersecurity requirements for projects & products are delivered on time, within scope and within budget

- Develop cybersecurity scopes and objectives of product / vehicle, involving all relevant stakeholders and ensuring technical feasibility

- Consider security risks early on and at key development stages (mostly those with design decisions)

- Create and maintain cybersecurity risk register for project / product, identify, assess, plan, assign and monitor & review cybersecurity risks relating to project / product.

- Collaborate with different stakeholders such as Chief production security officer, cybersecurity architecture & security team members.

- Manage cybersecurity vehicle vulnerabilities, issues, and action plans, as well as project cybersecurity-related communication and status reporting.

- Work closely and collaborate with Cybersecurity incident manager and cybersecurity incident response team to cover all vehicle Incident Response Management phases,

- Double check collected data related to vulnerabilities or security events for accuracy, completeness and availability.

- Confirm identified vulnerability candidates with the affected products/ service owner

- Verify if past product / vehicle vulnerability analysis reports are still applicable and confirm analysis results

- Determine the relevance and scope of vulnerabilities using part reports and cybersecurity event assessments.

- Identify impacted items/ components / subcomponents for reported weakness, events and incidents