Senior Cybersecurity Architect

Eccoci AB; Landskrona kommun; Vor Ort; SEK 900.000 - 1.200.000; Vollzeit

Zusammenfassung

Eccoci AB is seeking a Cybersecurity Architect to lead product cybersecurity for an electronically enabled product in early development. The role emphasizes regulatory compliance, CSMS development, and alignment with standards such as CRA and ISO/SAE 21434.

Collaboration with systems and software engineering will shape secure design decisions. Responsibilities include detailed threat analyses, risk assessments, evidence of regulatory traceability, and harmonising processes to meet regulatory

Qualifikationen

• Experience in leading cybersecurity architecture for electronic products under development.
• Familiarity with CRA and ISO/SAE 21434 and regulatory compliance evidence.
• Ability to coordinate across software/systems engineering teams.

Aufgaben

• Own the product cybersecurity architecture and regulatory compliance for an early-development product.
• Develop and mature CSMS aligned with regulatory frameworks.
• Perform threat analyses and risk assessments (TARA) and define mitigations.
• Harmonise cybersecurity processes across applicable regulations and standards.
• Provide cybersecurity design recommendations to the engineering team.

Kenntnisse

Cybersecurity architecture

Regulatory compliance

GRC

TARA

Vulnerability management

Regulatory traceability

Engineering collaboration

Tools

ISO/SAE 21434

CSMS development

Threat modeling

Jobbeschreibung

This role means you will have Cybersecurity Architectural responsibilities including: Product Cybersecurity and regulatory compliance for an electronically enabled product currently in early development.

Experience from and key areas for the role will include:

• EU Cyber Resilience Act (CRA)
• Product Cybersecurity / GRC
• CSMS development and maturity
• ISO/SAE 21434
• Threat Analysis and Risk Assessment (TARA)
• Cybersecurity requirements and concepts
• Regulatory traceability and compliance evidence
• Vulnerability management
• Supporting systems/software engineering with cybersecurity design recommendations
• Harmonising existing cybersecurity processes across relevant regulatory frameworks