Director - Security Product Management - One Tech

Aurora Innovation•Mountain View, CA

12h•$247,000 - $320,000•Hybrid

About The Position

Aurora is seeking a Director, OneTech Product Management to build, improve, and maintain the Aurora catalog of IT and Security Products and Services. This role involves overseeing and driving product and service requirements, and developing OneTech roadmaps to support Aurora Driver, Cloud, and Enterprise systems. The individual will ensure OneTech products meet high standards of IT accuracy, speed, and security throughout their lifecycles. The Director will manage an internal team of product experts, influence cross-functional initiatives, and build and manage OneTech product and program goals aligned with Aurora's operational and business objectives.

Requirements

5+ years of experience in automotive IT, security, vehicle systems engineering, or related fields.
At least 2 years in a product management role.
Strong understanding of automotive cybersecurity standards and frameworks, including ISO/SAE 21434, ISO 26262, and automotive safety lifecycle.
Proven experience in developing software and hardware products, use cases, product requirements, and risk management of complex systems.
Working knowledge of vehicle architecture, embedded systems, and vehicle communication protocols (e.g., CAN, Ethernet).
Expertise with threat modeling, penetration testing, and security assessments requirements and outcomes for automotive systems.
Ability to manage multiple priorities in a fast-paced, dynamic environment.

Nice To Haves

Expert knowledge and familiarity with IT and security tools and practices.
Knowledge of features such as EDR, secure boot, secure communications, intrusion detection, and over-the-air (OTA) updates is a plus.
Experience with Agile project management methodologies and tools.
Strong communication skills, both verbal and written, with the ability to convey complex technical information to a broad audience.
Certification in security (CISSP, CISM, or equivalent) or safety (e.g., ISO 26262 certification) is a plus.

Responsibilities

Develop, manage, and track requirements for all OneTech products and services supporting the Aurora Driver (Onboard, Offboard, and Enterprise systems) and Aurora corporate systems throughout their lifecycle.
Create and maintain meaningful OneTech product use-cases.
Work closely with cross-functional teams (architecture, engineering, safety, product management) to ensure all OneTech requirements are captured, understood, and translated into actionable tasks.
Conduct regular reviews of OneTech products and services to ensure alignment with regulatory requirements, industry standards, and emerging threat landscapes.
Create traceability matrices to ensure complete and consistent requirements coverage across all products, systems, and components.
Collaborate with engineering and product teams across the company to build the roadmap of OneTech products and services supporting vehicle program needs and corporate requirements.
Drive OneTech strategic planning for vehicle and corporate products and services, balancing technical feasibility, timelines, and business priorities.
Monitor the progress of deliverable milestones, identifying potential risks or delays, and create mitigation plans.
Track and report on the status of OneTech IT, security, and safety-related deliverables and development timelines.
Stay up-to-date with emerging trends in automotive IT and security technologies, including cloud, AI, cybersecurity, encryption, secure boot, and other advanced techniques.
Deeply partner with OneTech architecture, IT, security and product engineering, compliance, and legal teams to ensure OneTech vehicle and corporate programs meet internal and external standards, regulations, and customer requirements.
Lead and facilitate cross-functional meetings to drive the development of OneTech OKRs, track and report progress, resolve issues, and ensure alignment across departments.
Prepare detailed reporting, technical documents, and presentations for internal and external stakeholders, including senior management and regulatory bodies.
Ensure comprehensive documentation is created for all security-related decisions, actions, and risk assessments.
Monitor compliance with internal quality and safety standards, ensuring programs are executed to the highest level of quality.