Cybersecurity Management System (CSMS) Process Architect

Experis; Polska; Hybrid; PLN 234,000 - 289,000; Full time

Benefits offered by this job

MultiSport Plus

Group insurance

Medicover Premium

Job summary

Experis is offering a remote‑based role from Poland focusing on Cybersecurity Management System (CSMS) development. You will ensure compliance with UNECE R155 and ISO/SAE 21434, define governance and KPIs, and align CSMS with product development.

The role requires hands‑on experience in automotive cybersecurity, risk assessment, and auditing, with occasional international travel to support global certifications.

Qualifications

• Strong experience in Automotive Cybersecurity or CSMS implementation.
• Hands-on with ISO/SAE 21434 and UNECE R155/R156 compliance activities.
• Experience defining, implementing, and auditing cybersecurity management processes.
• Background in systems/embedded engineering and vehicle cybersecurity.

Responsibilities

• Develop and maintain the CSMS process architecture.
• Ensure compliance with UNECE R155, ISO/SAE 21434, and other regulations.
• Define cybersecurity governance, roles, responsibilities and KPIs.
• Align CSMS requirements with project and product development.
• Support tools and processes required for CSMS execution.
• Prepare for internal and external audits and certification reviews.
• Conduct compliance assessments and gap analyses across brands and suppliers.
• Support engineering teams regarding cybersecurity requirements and artefacts.
• Drive certification and surveillance activities for global markets; travel may be required.

Skills

Automotive cybersecurity

CSMS implementation

ISO/SAE 21434

UNECE R155/R156

Threat Analysis and Risk Assessment

Vulnerability Management

Penetration Testing

Requirements Traceability

Compliance Management

Systems Architecture

Embedded Systems

Vehicle Cybersecurity

Stakeholder Management

Cross-functional Leadership

Tools

ISO/SAE 21434 tooling

Job description

Location

100% remote work from Poland, with a requirement to travel to Sweden for approximately 2 days per month

Salary

170 – 210 PLN net/h (B2B via Experis)

Responsibilities

• Develop and maintain the Cybersecurity Management System (CSMS) process architecture.
• Ensure compliance with UNECE R155, ISO/SAE 21434, and other applicable cybersecurity regulations.
• Define cybersecurity governance, roles, responsibilities, and KPIs.
• Align organizational CSMS requirements with project and product development activities.
• Support implementation of tools, methods, and processes required for CSMS execution.
• Prepare for and participate in internal and external audits and certification reviews.
• Conduct compliance assessments and gap analyses across brands, projects, and suppliers.
• Support engineering teams regarding cybersecurity requirements, ECU and HPC cybersecurity artefacts, and process compliance.
• Drive certification and surveillance activities for global markets, including South Korea, China, Taiwan, India, and other regions. Occasional international travel may be required.

Requirements

• Strong experience in Automotive Cybersecurity, Cybersecurity Governance, or CSMS implementation.
• Hands-on experience with ISO/SAE 21434 and UNECE R155/R156 compliance activities.
• Experience defining, implementing, and auditing cybersecurity management processes.
• Background in systems architecture, embedded systems, vehicle cybersecurity, or systems engineering.
• Experience working within automotive OEMs, Tier-1 suppliers, or similarly regulated product development environments.
• Strong stakeholder management and cross-functional leadership skills.
• Working knowledge of: Threat Analysis and Risk Assessment (TARA), Vulnerability Management, Penetration Testing, Requirements Traceability and Compliance Management

Preferred Qualifications

• Experience with GB44495 or other regional cybersecurity regulations.
• Experience supporting vehicle cybersecurity certifications and regulatory audits.
• Knowledge of supplier cybersecurity governance and CS-DIA agreements.
• Familiarity with ISO 9001, IATF 16949, and ISO 27001 frameworks.
• Knowledge of development processes, SAFe, or governance models.
• Relevant certifications such as CISSP, CISM, or formal ISO/SAE 21434 training.

Our offer

• MultiSport Plus
• Group insurance
• Medicover Premium