Deputy General Manager- Cyber Security- TMPV Engineering

Purpose of the Role:

Cyber Security Expert provides guidance and support for developing secure automotive systems in compliance with ISO/SAE 21434, UN R155, UN156 and related cybersecurity standards. Act as the key driver for implementing cybersecurity processes, governance, and work products aligned with automotive cybersecurity regulations and best practices.

Job Responsibility :

• Define, produce, and track cybersecurity work products such as Cybersecurity Management Plan (CSMP), Threat Analysis and Risk Assessment (TARA), Cybersecurity Concept, Security Requirements, Incident Response Plan, and Cybersecurity Case.
• Lead cybersecurity verification and validation activities including penetration testing, vulnerability assessment, and security testing at ECU, system, and vehicle level.
• Own and drive end-to-end cybersecurity concepts across E/E architecture and vehicle programs.
• Establish and maintain all cybersecurity-related internal and external interfaces (suppliers, IT, software teams, regulatory bodies).
• Timely communicate risks, vulnerabilities, deviations, and mitigation plans to CoC Leads and management.
• Plan and coordinate cross-functional meetings (CFT) for cybersecurity reviews throughout product lifecycle.
• Participate in project reviews (Daily, Aggregate, Apex) and highlight cybersecurity risks and compliance status.
• Identify cybersecurity risks, assess potential impact, and ensure robust mitigation strategies with stakeholders.
• Ensure strong collaboration with suppliers and internal teams to deliver secure and compliant solutions.
• Ensure achievement of cybersecurity targets for all E&E aggregates.
• Maintain and enhance cybersecurity capabilities in existing and new vehicle platforms.
• Manage cybersecurity requirements lifecycle including traceability and coverage.
• Support homologation and certification activities (UN R155, ISO/SAE 21434 compliance).
• Conduct cybersecurity audits and reviews across development lifecycle.
• Drive organizational changes required for cybersecurity compliance and maturity improvement.
• Represent E&E in customer/regulatory cybersecurity forums and technical discussions.
• Maintain and track open cybersecurity issues and ensure timely closure.
• Ensure cybersecurity case completeness and compliance with internal and regulatory gateway requirements.
• Ensure end-to-end traceability between threats, risks, controls, and verification results.
• Support development and standardization of cybersecurity templates, guidelines, and best practices

Desired Candidate Profile:

• BE/B. Tech in Electrical / Electronics / Computer Science / Cyber Security
• Master’s in cyber security / Embedded Systems / Information Security (Preferred)
• Minimum 12 years of experience in automotive product engineering with focus on cybersecurity
• Strong experience in embedded systems, ECU architecture, automotive software, and networks (CAN, Ethernet, LIN)
• Expertise in Threat Analysis and Risk Assessment (TARA) methodologies
• Experience in cybersecurity testing (penetration testing, fuzz testing, vulnerability analysis)
• Knowledge of cryptography, secure boot, secure communication, key management, IDS/IPS in automotive
• Strong understanding of ISO/SAE 21434, UN R155/R156, ISO 24089 (SUMS), and related standards
• Ability to allocate cybersecurity requirements to HW/SW components based on E/E architecture
• Experience in defining and reviewing cybersecurity requirements and controls
• Hands-on experience with tools:
• DOORS / IBM Engineering Requirements Management
• Threat modeling tools (Medini Analyze, ThreatModeler, etc.)
• PLM tools
• Network analysis tools (CANoe, Wireshark)
• Security testing tools (Burp Suite, Kali Linux, etc.)
• Understanding of automotive regulatory compliance and homologation requirements for cybersecurity

Behaviour Skill:

• Strong leadership & ownership mindset
• Risk-based decision making
• Cross-functional stakeholder management
• High attention to detail (traceability, compliance)
• Ability to handle regulatory audits and senior management communication