Manager, Product Cybersecurity

The Product Cybersecurity Manager leads a group of product cybersecurity engineers and in collaboration with the system engineering leads to support the development of a secure and robust solution covering both hardware and software which may include hardware trust anchors, secure on-board communication, secure bootloader, and other related features.

Key Responsibilities

• Lead product cybersecurity roadmap with resources planning, process maintenance/modifications, and enhancing organizational product cybersecurity maturity.
• Work with Dana IT/OT cybersecurity team to ensure proper synergies.
• Plan and lead product cybersecurity activities across projects in relation to meeting stakeholder requirements
• Lead conversation related to cybersecurity activities with customers and review cybersecurity case to ensure products will meet cybersecurity objectives
• Review cybersecurity risk assessments and threat modeling as related to the specified product and project
• Support projects during quoting process by analyzing cybersecurity requirements, providing effort estimates, and cross-referencing the product offerings
• Review the decomposition of cybersecurity requirements from stakeholder requirements and work closely with hardware, software, and functional safety team members to ensure secure technical solution can be achieved
• Work closely with hardware and software vendors to ensure that technical solutions meet stakeholder requirements; plan and present mitigation activities as required
• In collaboration with global Dana Process, Methods and Tools team as required
• Assist in training and awareness as required

Required Experience

• 5+ years of experience in embedded cybersecurity (automotive preferred)
• 3+ years of experience managing teams
• 5+ years of experience in embedded software development (C, C++, AUTOSAR)
• Expert knowledge of industry standards related to cybersecurity (UNECE WP.29, SAE J21434)
• Expert knowledge of cybersecurity testing
• Excellent communication and analytical skills
• Excellent organizational skills as demonstrated through executed production programs
• Experience with Jira, Polarion, Azure or similar tools
• Ability to work independently as required and take ownership of project deliverables
• Knowledge of ASPICE and ISO26262.

Education

• Bachelor's degree in Engineering, Computer Science, or related discipline
• Certifications in cybersecurity are a plus