IVI Cybersecurity

Maruti Suzuki India Ltd.; Gurugram District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Maruti Suzuki India Ltd. is seeking a cybersecurity specialist to drive development and compliance for in-vehicle infotainment and connected systems. You will coordinate with suppliers, ensure alignment with CS processes, and support validation and regulatory audits.

Candidate will apply UN R155/156 and AIS 189/190 requirements, perform risk assessments, and implement security controls across vehicle ECUs and interfaces. Strong collaboration and documentation skills are essential.

Qualifications

• Experience with automotive cybersecurity frameworks and standards.
• Knowledge of UN-R155/156 AIS 189/190 and ISO/SAE 21434.
• Ability to coordinate with suppliers and validate CS work products.

Responsibilities

• Perform cybersecurity relevance assessment and develop plans per ISO/SAE 21434.
• Conduct Threat Analysis and Risk Assessment; create system/ECU requirements.
• Review design specs with suppliers and validate reports.
• Lead cybersecurity controls across IVI hardware/software/interfaces.

Skills

Cybersecurity

Regulatory Compliance

Threat Analysis

Tools

Wireshark

nmap

ADB

CANoe

Job description

• Responsible for cybersecurity (CS) development and compliance for In-Vehicle-Infotainment (IVI) and related connected systems.
• The role covers cybersecurity design, development, supplier coordination, and validation support in line with UN-R155/156 (AIS 189/190) and internal CSMS/SUMS processes.

Key Responsibilities

• Perform cybersecurity relevance assessment, development planning, and implementation management as per ISO/SAE 21434 and deliver cybersecurity work products.
• Perform Threat Analysis and Risk Assessment and create system/ECU level technical requirements and evaluation specifications according to CS Concept and CS Goals.
• Review and align detailed design specifications for cybersecurity along with suppliers and business partners and assess corresponding validation reports.
• Drive implementation of cybersecurity controls across infotainment hardware, software, and interfaces.
• Perform cybersecurity validation, vulnerability assessment, and incident handling.
• Support UN R155/156 (AIS 189/190) compliance activities, prepare, review, and maintain documentation and cybersecurity work products for internal reviews and regulatory audits.
• Act as primary cybersecurity interface for Tier-1 suppliers, business partners, internal stakeholders, and compliance teams.
• Knowledge of UN-R155/156, AIS189/190 regulations and ISO/SAE 21434, ISO 24089 standards.
• Familiarity with TARA i.e. identification of cyber security assets, threat vectors, attack paths, risk assessment etc.
• Familiarity with security concepts such as secure diagnostics, secure boot, cryptography fundamentals, PKI, certificate-based authentication, secure SW development, application sandboxing, SE Linux, secure debug controls, secure updates, intrusion detection etc.
• Understanding of vehicle E/E architecture, ECU interactions, and infotainment connectivity.
• Understanding of network interfaces and protocols such as CAN, UDS, USB, Bluetooth, WiFi, TCP/IP and corresponding security considerations.
• Hands-on experience in automotive development process and understanding of IVI system’s features and functions.
• Knowledge of IVI system architecture, hardware, and software fundamentals.
• Familiarity with Linux/Android OS architecture concepts, core services, and application-level interactions.
• Understanding of cloud/web-based application fundamentals, system design, and security considerations.
• Hands on experience in cybersecurity validation of Automotive ECUs or Embedded Systems.
• Strong ownership, accountability and execution focus.
• Structured documentation and clear communication skills.
• Collaborative approach and ability to handle multiple deliverables concurrently.
• Continuous learning mindset with awareness of evolving technologies and standards.

Tools:

• Exposure to network and ECU analysis tools (Wireshark, nmap, ADB, CANoe etc.)
• Familiarity with requirements and defect tracking tools (e.g. Jira)