Cybersecurity Officer

What you will do

As a Product Cybersecurity Officer (PCS officer), you will be responsible for contributing towards the overall security and compliance of our organization's automotive systems and connected vehicles in collaboration with various internal & external stakeholders. 
This role plays a critical supporting part in safeguarding our vehicles f ram cyber threats, managing risks, and ensuring compliance with industry regulations and standards. 
PCS Officer is a role filled by resources in Product Cybersecurity Management System (PCSMS) in GTT cybersecurity and functional safety central team. A PCS Officer could take the following different responsibilities during deployment of PCSMS: 

■     R155 Product Regulation Compliance Owner (PRCO)
■     Product Cybersecurity Leader
■     Vehicle Cybersecurity Coordinator
■     Vehicle Cybersecurity Engineer

Primary Responsibilities

Governance:

■     Develop and maintain PCSMS in accordance with applicable product cybersecurily standards, and procedures for the organization's automotive systems.
■     Establish a governance framework to oversee cybersecurity initiatives and ensure alignment with business objectives. (e.g., R155)
■     Collaborate with senior management to communicate and promote a culture of cybersecurity awareness and compliance throughout the organization.
■     Support in technically evaluating new global cybersecurity regulations and setting up /improving processes, instructions, and templates (among others) in coordination with internal GTT team.
■     Create appropriate guidelines for Product Development teams to enable them to maintain clear traceability of Cybersecurity changes on product levels. (e.g., Component, system, vehicle, Product Class and similar) to facilitate vehicle type approval certifications as appropriate.
■     Stays up to date with evolving regulations & coordinates necessary adjustments to policies and procedures.

Risk Management:

■     Support Vehicle & Technology Streams to identify, assess and manage cybersecurily risks related to vehicle systems and connected technologies.
■     Provide consolidated report of product cybersecurity risks and report to relevant stakeholders.

Audits & Compliance Management:

When acting as R155 Product Regulation Compliance Owner (R155 PRCO), the following responsibilities shall be taken up: 

■     Responsible for certifications such as R155 Regulation and GB/T 40863 Chinese CS Regulation.
■     Ensures compliance of Volvo Group Trucks with regional Vehicle Cybersecurity regulations.
■     Generate and owns needed cybersecurity agreements and guidelines related to PCS describing collaboration with Volvo Group entities (e.g., Volvo Bus, Penta, Construction Equipment) and external partners.
■     Prepares, reviews, and demonstrates necessary documents for R155 new and extension vehicle type approval and PCSMS Audit Events (e.g., R155 lnfoDoc).
■     Summarizes product-related cybersecurity changes and creates vehicle-level documentation for regulatory audits.
■     Monitors ongoing development work and activities (EPICs, Streams, Intro Blocks) that impact compliance and regulations affecting both new type approval and extension.

■     Leads efforts to secure compliance with external regulatory authorities, working with regulatory specialists and certification engineers.
■     Ensures all technical solutions (HW /SW) com ply with relevant regulations (e.g., R 155 standard)
■     Proactively prepares for and responds to upcoming challenges through cross­functional work across Volvo Group.
■     Remains aware of backlogs, risks, and issues raised within development teams.
■     Works with homologation experts to execute activities related to RX Software Identification Number (RXSWIN) for Regulation 155, including RxSWIN Assessment and preparation.

Secondary Skills

Upskilling, Training & PCSMS Infrastructure maintenance:

Act as Product Cybersecurity Leader within GTT and take on below responsibilities:

■     Develop and deliver cybersecurity training programs for employees, and partners involved in the overall vehicle development.
■     Promote a culture of cybersecurity awareness by organizing workshops and awareness campaigns.
■     Maintain and drive CoP and Supporting Forums related to various PCSMS processes, along with PCS coordinators.
■     Participate as expert advisor to the product development teams for screening and planning their CS activities in technical support forum.
■     Provides necessary guidance and infrastructure to enable the consolidation cl individual assurance cases. The responsibility for individual cases remains with the PO within respective Techno Streams.

Vehicle level Product Cybersecurity Program Management:

Act as Vehicle CS Coordinator within central PCSMS Team and take on the below responsibilities: 

■     Act as "CS Epic Owner'' in case of existence any specific cybersecurity EPIC.
■     Create I Update/ Refine cybersecurity work packages for various vehicle programs, supporting intro block's epic owners or work package Leaders.
■     Monitor the progress of CS activities performed by Techno Stream to identify certification & compliance related risks and help development streams to address the same within specified time limits.
■     Provide necessary guidance and clarity to the stakeholders on the cybersecurily deliverables with the release of official work packages.
■     Follow up the objective, entry, exit and acceptance criterion of Cybersecurity deliverables for every Vehicle Development milestone (from concept until End of Life) and ensure compliance.
■     Release official Product Cybersecurity time plan thereby identifying program risks, plan mitigations and further secure consensus within the stakeholders.

■     Reporting in periodic Cybersecurity Program reviews concentrating on the time & quality of deliverables for every milestone.
■     Coordinate & facilitate effective communication between internal & external (if applicable) cybersecurity stakeholders to achieve the common objective of R155 Cybersecurity Vehicle Type Approval Certification in line with the business requirements.
■     Support the engagements with regional technical services & type approval authorities related to R155 Cybersecurity Vehicle Type Approval as per the business requirements.

Technical Support under PCSMS maintenance:
Act as Vehicle CS Engineer within GTT and take on below responsibilities:

■     Develop the knowledge of GTT cybersecurity community in the execution of TARAs according to PCSMS instructions.
■     Support PCS Coordinator by technical means needed to execute the TARA and vulnerability analysis.
■     Improvement / maintenance TARA instructions, including methodology templates and tools.
■     Support CS Vehicle Architect with technical analysis needed to facilitate vehicle TARA if needed.
■     Support PCS Solution Architect with technical contribution needed during definition cl CS solutions provided by central team if needed.

Vendors and Suppliers Oversight:

■     Assess the overall cybersecurity practices of vendors and suppliers involved in vehicle components and software.
■     Ensure third-party compliance with cybersecurity standards and contractual requirements.

Qualification

Bachelor / Master's degree (or equivalent) in Cybersecurity, Computer Science, Information Technology/Security, Electronics, or relevant experience in cybersecurity domain.

1. Exposure & Knowledge about V-model in Automotive Product Development.
2. Familiar with Threat modeling & risk treatment approaches.
3. Knowledge of automotive embedded systems and communication protocols.

If CS Officer act as Vehicle CS Engineer, below competences would be also applicable in addition to above mentioned: 

1. Hands on experience with performing TARA
2. Knowledge of known vulnerability databases e.g., NVD, CVSS, CVE, CWE
3. Experience with CS Verification and validation (penetration testing and Fuzz testing)

Who we are and what we believe in

Our focus on Inclusion, Diversity, and Equity allows each of us the opportunity to bring our full authentic self to work and thrive by providing a safe and supportive environment, free of harassment and discrimination. We are committed to removing the barriers to entry, which is why we ask that even if you feel you may not meet every qualification on the job description, please apply and let us decide. 
Applying to this job offers you the opportunity to join Volvo Group. Every day, across the globe, our trucks, buses, engines, construction equipment, financial services, and solutions make modern life possible. We are almost 100,000 people empowered to shape the future landscape of efficient, safe and sustainable transport solutions. Fulfilling our mission creates countless career opportunities for talents with sharp minds and passion across the group's leading brands and entities. 
Group Trucks Technology are seeking talents to help design sustainable transportation solutions for the future. As part of our team, you'll help us by engineering exciting next-gen technologies and contribute to projects that determine new, sustainable solutions. Bring your love of developing systems, working collaboratively, and your advanced skills to a place where you can make an impact. Join our design shift that leaves society in good shape for the next generation.