Cybersecurity Internal Auditor, Powersport Vehicles

BRP; Montreal (administrative region); On-site; CAD 90,000 - 130,000; Full time

Benefits offered by this job

Annual bonus

Paid time off

Pension plan

Collective saving opportunities

Healthcare fully paid by BRP

Flexible work schedule

Summer schedule by department/location

Holiday season shutdown

Educational resources

BRP product discounts

Job summary

BRP is seeking an energetic internal auditor to strengthen cybersecurity practices across our powersport vehicle ecosystem. You’ll lead internal oversight of the CSMS for embedded systems and connected tech, ensuring conformance with ISO/SAE 21434, UNECE R155, and CRA across concept to decommissioning.

The role requires evaluating cybersecurity artefacts, partnering with engineering and manufacturing, and driving remediation actions to meet regulatory readiness.

Qualifications

• Bachelor's or Master's degree in Auditing, Cybersecurity, Engineering, CS or related field.
• 3–6 years auditing/assurance experience in automotive or tech environments.
• Experience planning, executing, and reporting audits across product lifecycles.
• Strong knowledge of ISO/SAE 21434 and UNECE R155/156 requirements; CRA familiarity.
• Ability to assess effectiveness of cybersecurity processes and traceability.
• Proven ability to identify risks, gaps, and provide remediation recommendations.
• Ability to translate complex findings into concise insights for leadership.
• Conflict resolution and clear risk-based communication.
• Preferred: ISO 27001 Lead Auditor, IATF 16949 Auditor, CISA, CISSP.

Responsibilities

• Define audit criteria and benchmarks for CSMS and artifacts.
• Lead audit schedules from concept to production for embedded systems.
• Analyze and report deviations to ensure standards compliance.
• Support root cause analysis with engineering, manufacturing, and sourcing teams.
• Manage corrective actions and remediation timelines.
• Provide internal strategic health assessments and certification readiness.

Skills

Auditing

Cybersecurity

ISO 21434

Embedded systems

Automotive

Regulatory compliance

Education

Bachelor's degree

Master's degree

Tools

Audit software

Job description

We are searching for an energetic, detail-driven, and forward-thinking powersport vehicle cybersecurity internal auditor to help strengthen cybersecurity practices across our product ecosystem.

In this role, your focus is strictly the "machine"—leading internal oversight to ensure our high-performance hardware, embedded systems, and connected vehicle tech remain resilient from concept to decommissioning. You will be the primary independent assessor of our Cybersecurity Management System (CSMS) and it’s application on our vehicles, ensuring our technical work products and vehicle architecture comply with ISO/SAE 21434, UNECE R155 and the EU Cyber Resilience Act (CRA).

You'll Have The Opportunity To

• Define audit criteria by establishing quality benchmark for the CSMS and work products to meet ISO/SAE 21434 and UNECE R155 ( content and container)
• Execute audit plan by leading audit schedules from concept to production for all embedded systems and connected technologies.
• Analyze & Report Deviations by evaluating Cybersecurity artifacts to ensure compliance with applicable standards
• Support root cause analysis by partnering with vehicle engineering, powertrain, connectivity, cybersecurity, certification, manufacturing and global sourcing
• Manage corrective actions by tracking remediation plans to ensure all non-compliance is resolved within defined timelines
• Strategic status reporting ( internal) by providing health assessment of the cybersecurity powersports ecosystem and regulatory certification readiness

YOU’LL THRIVE IN THIS ROLE IF YOU HAVE THE FOLLOWING SKILLS AND QUALITIES:

• Bachelor's or Master’s degree in Auditing, Cybersecurity, Engineering, Computer Science, or a related discipline.
• 3–6 years of experience conducting audits, assessments, or compliance reviews within automotive, powersport, manufacturing, cybersecurity, or other technology-driven environments.
• Demonstrated experience planning, executing, and reporting audits across product development lifecycles, preferably within cybersecurity, software, embedded systems, or regulated engineering environments.
• Strong knowledge of ISO/SAE 21434 and UNECE R155/R156 requirements, with familiarity with the EU Cyber Resilience Act (CRA) and related cybersecurity regulatory frameworks.
• Ability to objectively assess the effectiveness of cybersecurity processes, controls, and work products, and verify traceability between cybersecurity objectives, requirements, implementation, and verification activities.
• Proven ability to identify, evaluate, and communicate risks, gaps, and non-conformities, providing stakeholders with clear context and recommendations to support effective remediation.
• Skilled at translating complex technical and cybersecurity findings into concise, actionable insights and organizational health assessments for management and executive leadership.
• Skilled in resolving conflicts and overcoming pushback through clear communication of audit context and risk-based evidence
• Preferred certifications include ISO 27001 Lead Auditor, IATF 16949 Auditor, CISA, CISSP, or equivalent.

ACKNOWLEDGING THE POWER OF DIVERSITY

BRP is dedicated to nurturing a culture that invites, connects, and propels the ambitions of people of all backgrounds, profiles, beliefs and experiences. Ultimately, the diversity and uniqueness of our people fuel our ingenuity and set the course for the path ahead!

For this reason, we value diversity and we strive to always push each other forward to build an inclusive workplace where every employee feels like they belong, where they can grow and find meaning.

AT BRP, WHEN WE TALK ABOUT BENEFITS, WE GO ALL IN.

Let’s start with a strong foundation — You want it, we have it:

• Annual bonus based on the company’s financial results
• Generous paid time away
• Pension plan
• Collective saving opportunities
• Industry leading healthcare fully paid by BRP

What About Some Feel Good Perks

• Flexible work schedule
• A summer schedule that varies by department and location
• Holiday season shutdown
• Educational resources
• Discount on BRP products

WELCOME TO BRP

We’re a world leader in recreational vehicles and boats, creating innovative ways to move on snow, water, asphalt, dirt and even in the air. Headquartered in the Canadian town of Valcourt, Quebec, our company is rooted in a spirit of ingenuity and intense customer focus. Today, we operate manufacturing facilities in Canada, the United States, Mexico, Finland, Australia and Austria, with a workforce made up of close to 17,000 spirited people, all driven by the deeply held belief that at work, as with life itself, it’s not about the destination: It’s about the journey.