jobapplier

Product Cybersecurity & Compliance Manager

Strattec Security Corp.

Skills

Required

  • Cybersecurity
  • CSMS process development and governance
  • ISO 21434
  • ASPICE
  • ISO 26262
  • process development and compliance
  • Application Lifecycle Management
  • PTC Integrity / Codebeamer
  • Microsoft Office tools
  • modern security testing methods

Preferred

  • ISO
  • ISO 24089
  • cybersecurity lifecycle

Responsibilities

  • POSITION OVERVIEW We are seeking a highly skilled Product Cybersecurity & Compliance Manager to establish, harmonize, implement and oversee our product Cybersecurity (CSMS/SUMS) processes.
  • The candidate will spearhead the implementation of our end-to-end cybersecurity lifecycle.
  • In addition, you will oversee the continued evolution and rollout of secondary supporting frameworks, specifically ASPICE and Functional Safety (FuSa) .
  • In this role, you will serve as the central technical authority and act as the "glue" connecting engineering, quality, manufacturing and global customers.
  • While this position does not have direct reports, it requires robust technical leadership to guide cross-functional project teams and ensure world-class compliance.
  • Crucially, you will have the authority to independently escalate critical concerns directly to executive leadership .
  • DUTIES AND RESPONSIBILITIES Core Product Cybersecurity & Software Updates (Primary Focus) CSMS & SUMS Governance: Establish internal processes and lead overall corporate governance aligned with ISO 21434 and ISO 24089 standards.
  • Plan, support, and review critical engineering work products—including TARA (Threat Analysis and Risk Assessment), cybersecurity concepts, and verification evidence—directly alongside project teams.
  • Manage core product security operations, including vulnerability management, incident response, and secure production software transfers.
  • Ensuring implementation of adequate Product Security solutions & approved security measures Secondary Compliance Frameworks & Integration Process Integration: Merge disparate engineering processes into a singular, unified framework that seamlessly supports CSMS, SUMS, FuSa, and ASPICE.
  • Oversee system and software development processes aligned with ASPICE standards.
  • Enforce strict, bi-directional traceability from stakeholder requirements down to architecture and verification testing.
  • Perform Software Quality Assurance (SQA) activities and lead gate reviews.
  • Oversee key safety work products—including HARA, FMEA/SW FMEA, FTA, and safety concepts—ensuring all processes align with ISO 26262 standards.
  • Leadership & Business Operations Cross-Functional Interface: Act as the central liaison bridging critical coordination between Engineering, Program Management, IT, Manufacturing, Quality, Purchasing, and Human Resources.
  • Own the technical interface with global customers and suppliers.
  • Cybersecurity Interface Agreements (CIAs) and Development Interface Agreements (DIAs) to align scope, timelines, and deliverables.
  • Track and report KPIs regarding process maturity and compliance health.
  • Conduct periodic internal audits to drive continuous improvement and coordinate external assessments to maintain global certifications.
  • Define customized process compliance models for new business awards based on specific customer requirements.
  • Lead software project teams through technical guidance and exercise your independent internal leadership escalation authority to bring attention to and seek immediate support for critical issue resolution.

Requirements

  • QUALIFICATIONS & REQUIREMENTS Education Bachelor of Science in an Engineering field required (Electrical/Electronics, or Computer Engineering strongly preferred).
  • Experience 5+ years of direct experience in CSMS process development and governance (ISO 21434).
  • Preferred 3+ years of experience in ASPICE and Functional Safety (ISO 26262) process development and compliance.
  • Proficiency with Application Lifecycle Management (ALM) systems such as PTC Integrity or Codebeamer; expert proficiency with Microsoft Office tools.
  • Familiarity with modern security testing methods (including fuzz testing and penetration testing), CI/CD pipelines, and Agile workflows.
  • TÜV/ INTACS certified Assessor for Cybersecurity, FuSa, ASPICE Automotive Systems: Broad understanding of embedded software, electrical systems, vehicle communication protocols, controls, and secure design controls (e.g., secure flashing, secure communication, data management).
  • General understanding of hardware/mechanical design, manufacturing, quality assurance, and after-sales support.
  • SKILLS Strong oral and written English language skills.
  • Strong technical writing skills.
  • Ability to effectively represent information and respond to questions in a meeting environment including with customers and executive leadership.

Preferred

  • Skills & Knowledge Regulations & Standards: Deep understanding of UN Regulations UN R155 and UN R156, alongside a working knowledge of ISO 21434, ISO 24089, ISO 26262, and ASPICE frameworks.