Develop and maintain a comprehensive product cybersecurity architecture for our product ecosystem, ensuring alignment with industry standards and business objectives.
Stay well-informed of emerging cybersecurity threats and technologies; continuously updating our cybersecurity strategies and solutions accordingly.
Oversee and evaluate the implementation of cybersecurity controls, including but not limited to, encryption, access controls, network security, and secure coding practices.
Collaborate with product development teams to incorporate cybersecurity into the design and development lifecycle of products.
Liaise with external cybersecurity vendors and partners, managing relationships, and ensuring the effective integration of third-party security solutions.
Responsible for career development and performance management of the team.
Document, maintain, and lead the implementation of key activities in the cybersecurity management system.
Conduct, with a cross-functional team, a thorough threat analysis and risk assessment for existing and new products; identifying potential vulnerabilities and proposing mitigation strategies.
Complete the evidence to support the safety case claims for product cybersecurity.
Ensure compliance with relevant industry, regulatory, and organizational cybersecurity standards and policies.
Represent Torc at external standards and industry bodies and communicate our product cybersecurity approach.
Prepare and present reports on cybersecurity architecture, risk assessments, and mitigation strategies to senior management and relevant stakeholders.
Participate in and support product cybersecurity incident response and forensic activities.
Coordinate and share cybersecurity information, risk assessments, and incident updates with IT and Enterprise Cybersecurity teams to ensure consistent alignment of product cybersecurity practices with enterprise-wide standards and response protocols.

Requirements

Bachelor's Degree in Computer Science, Cybersecurity, or related technical field.
7+ years of experience of hands-on engineering with safety-critical, cyber-physical systems (automotive, aerospace, medical).
5+ years of experience managing engineers, directors, budgets, and strategic initiatives.
Ability to be a strategic partner to the organization; identify and plan how to meet future needs of the organization on a global scale.
Ability to effectively manage a team of professionals and identify opportunities to grow and develop the team.
Strong understanding of cybersecurity protocols.
Proficient in automotive cybersecurity standards and regulations (e.g., ISO/SAE 21434, UN R155).
Proficient in a cybersecure development lifecycle such as the AVCDL (A Versatile Cybersecurity Development Lifecycle), Microsoft SDL, or similar.
Excellent written and verbal communication skills; able to articulate complex cybersecurity concepts to a varied audience.
Proven track record of implementing successful cybersecurity solutions in product development.

Benefits

A competitive compensation package that includes a bonus component and stock options
100% paid medical, dental, and vision premiums for full-time employees
401K plan with a 6% employer match
Flexibility in schedule and generous paid vacation (available immediately after start date)
Company-wide holiday office closures
AD+D and Life Insurance

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

cybersecurity architectureencryptionaccess controlsnetwork securitysecure coding practicesthreat analysisrisk assessmentcybersecure development lifecycleautomotive cybersecurity standardsISO/SAE 21434

Soft Skills

team managementstrategic planningcareer developmentperformance managementcommunication skillscollaborationrelationship managementproblem-solvingleadershippresentation skills