CSMS Process Architect

Cyclad; Kraków; On-site; PLN 205,000 - 291,000; Full time

Benefits offered by this job

Private medical care

Multisport card

Life insurance

Job summary

Cyclad is seeking an experienced Cybersecurity Management System (CSMS) Process Architect to drive cybersecurity process excellence and regulatory compliance across global automotive development programs.

You will develop, maintain and improve CSMS processes, ensuring UNECE R155/R156, ISO/SAE 21434 compliance and governance across multiple markets. This role requires collaboration with engineering, compliance and product teams and support for audits and certifications.

Qualifications

• Proven automotive cybersecurity governance experience.
• Hands-on CSMS implementation and audits.
• Ability to translate regulations into practical processes.
• Strong cross-functional collaboration across teams.

Responsibilities

• Develop and maintain CSMS process architecture across programs.
• Ensure UNECE R155/R156 and ISO/SAE 21434 compliance.
• Define governance frameworks, roles, responsibilities and KPIs.
• Align CSMS with vehicle development and product lifecycles.
• Support audits, certifications and surveillance activities.
• Guide engineering teams on cybersecurity requirements and artefacts.
• Collaborate with governance, engineering, compliance and product teams.

Skills

Cybersecurity governance

CSMS implementation

Stakeholder management

Cross-functional collaboration

Audits & compliance

Job description

In Cyclad we work with top international IT companies in order to boost their potential in delivering outstanding, cutting edge technologies that shape the world of the future. Currently, we are looking for an experienced Cybersecurity Management System (CSMS) Process Architect to drive cybersecurity process excellence and regulatory compliance across global automotive development programs. This role offers an opportunity to contribute to international vehicle cybersecurity initiatives, shape cybersecurity governance frameworks, and ensure compliance with evolving regulations and industry standards across multiple markets.

Project information:

• Type of employment: B2B contract
• Remuneration: 180 PLN net + VAT per hour on B2B
• Project languages: Polish and English

Key Responsibilities:

• Develop, maintain, and continuously improve the Cybersecurity Management System (CSMS) process architecture.
• Ensure compliance with UNECE R155, R156, ISO/SAE 21434, and other applicable cybersecurity regulations and standards.
• Define and maintain cybersecurity governance frameworks, roles, responsibilities, and KPIs.
• Align organizational CSMS requirements with vehicle development projects and product lifecycle activities.
• Support the implementation and continuous improvement of tools, methods, and processes required for effective CSMS execution.
• Prepare for and participate in internal and external audits, certification assessments, and surveillance activities.
• Conduct compliance assessments and gap analyses across projects, brands, and suppliers.
• Provide guidance to engineering teams on cybersecurity requirements, ECU and HPC cybersecurity artefacts, and process compliance.
• Support global vehicle cybersecurity certification activities across markets, including South Korea, China, Taiwan, India, and other regions.
• Collaborate with cross-functional stakeholders across governance, engineering, compliance, and product development teams.

Requirements:

• Proven experience in automotive cybersecurity, cybersecurity governance, or Cybersecurity Management System (CSMS) implementation.
• Hands-on experience with ISO/SAE 21434 and UNECE R155/R156 compliance activities.
• Experience defining, implementing, maintaining, and auditing cybersecurity management processes.
• Background in systems architecture, embedded systems, vehicle cybersecurity, or systems engineering.
• Experience working within automotive OEMs, Tier-1 suppliers, or similarly regulated product development environments.
• Strong stakeholder management, communication, and cross-functional collaboration skills.
• Ability to translate regulatory requirements into practical processes and engineering activities.
• Working knowledge of:
  • Threat Analysis and Risk Assessment (TARA)
  • Vulnerability management
  • Penetration testing
  • Requirements traceability and compliance management
  • Openness to international business travel

We offer:

• Private medical care with dental care (covering 70% of costs). Family package option possible
• Multisport card (also for an accompanying person)
• Life insurance
• Work with talented engineers on large-scale, technically challenging projects