Product Cybersecurity Manager

Embotech; Zürich; On-site; CHF 110,000 - 190,000; Full time

Job summary

Embotech, a software scale-up for autonomous driving technologies, seeks a Product Cybersecurity Manager in Zurich or Munich. You will own cybersecurity risk across all products, ensuring compliance with standards like IEC 62443 and ISO 21434, and lead V&V activities.

You will collaborate with the cybersecurity architect, product leads, and functional safety to align on risks and implement robust security measures across the development lifecycle.

Qualifications

• Must have a degree or vocational training in information security, computer science or a related field.
• IEC 62443 training is desirable. Other security certifications are a plus
• 5+ years of hands-on cybersecurity experience, ideally in industrial automation/OT or automotive fields
• Practical experience with TARA, threat modelling and vulnerability analysis under IEC 62443 or ISO 21434
• Working knowledge of secure development processes, from security concept to V&V
• Experience in management of supply-chain risks, vulnerabilities, and security incidents
• Familiarity with functional safety (IEC 61508, ISO 13849, ISO 26262)
• Self-driven, accountable and hands-on
• Team player, ready to help
• Fluent English. German is an advantage

Responsibilities

• Perform TARA and vulnerability analyses under IEC 62443 and related standards
• Work closely with the Functional Safety manager to align on safety-relevant cyber risks
• Develop cybersecurity and requirements together with the cybersecurity architect and product technical leads
• Define and support the implementation of cybersecurity V&V activities
• Maintain risk and vulnerability registers
• Manage supply-chain security risks
• Lead vulnerability disclosure, management and incident response for embotech products
• Own cybersecurity policies, procedures, training and culture at Embotech
• Ensure product compliance with Machinery Regulation, CRA and other frameworks
• Support other areas with the assessment and mitigation of information or cybersecurity risks

Skills

Cybersecurity

Risk assessment

Threat modelling

Vulnerability analysis

Supply-chain security

IEC 62443

Functional safety

Security architecture

Team player

Fluent English

Education

Information security degree

Tools

CSMS

ISMS

Job description

Embotech is an award-winning software scale-up developing cutting edge autonomous driving technology and solutions for autonomous vehicles, with focus on private ground applications such as trucks at port terminals and passenger cars in factories. We are delivering safe autonomous transportation by leveraging the real-time optimization technology that we have been developing since 2012.

We are looking for an experienced Product Cybersecurity Manager based in Zurich or Munich. You will be responsible for identifying, mitigating and managing cybersecurity risk across all the organization’s products, as well as ensuring their compliance with required cybersecurity standards and regulations.

We offer an exciting role in a fast-growing company with attractive conditions and flexible hours. Embotech develops innovative products in a modern and dynamic environment, and you can expect an international atmosphere, with highly skilled colleagues with a passion for excellence and efficiency. We are looking for highly motivated people to help us solve one of the most complex challenges of today and take our company to the next level.

Responsibilities:

• Perform TARA and vulnerability analyses under IEC 62443 and related standards
• Work closely with the Functional Safety manager to align on safety-relevant cyber risks
• Develop cybersecurity and requirements together with the cybersecurity architect and product technical leads
• Define and support the implementation of cybersecurity V&V activities
• Maintain risk and vulnerability registers
• Manage supply-chain security risks
• Lead vulnerability disclosure, management and incident response for embotech products

Cybersecurity management:

• Own cybersecurity policies, procedures, training and culture at Embotech
• Ensure product compliance with Machinery Regulation, CRA and other frameworks
• Support other areas with the assessment and mitigation of information or cybersecurity risks

Requirements:

Must have:

• Degree or vocational training in information security, computer science or a related field
• IEC 62443 training is desirable. Other security certifications are a plus
• 5+ years of hands-on cybersecurity experience, ideally in the industrial automation/OT or automotive fields
• Practical experience with TARA, threat modelling and vulnerability analysis under IEC 62443 or ISO 21434
• Working knowledge of secure development processes, from security concept to V&V
• Experience in the management of supply-chain risks, vulnerabilities, and security incidents
• Familiarity with functional safety (IEC 61508, ISO 13849, ISO 26262)
• Self-driven, accountable and hands-on
• Team player, ready to help
• Fluent English. German is an advantage

Nice to have:

• Knowledge of best security practices and tooling for relevant technologies such as C++, Linux, Docker and AWS
• Experience working with a CSMS or ISMS
• Experience owning product security end to end