Powersport Vehicles Cybersecurity Internal Auditor

BRP•Montreal, QC

32d•Hybrid

About The Position

We are searching for an energetic, detail-driven, and forward-thinking Powersport Vehicle Cybersecurity Internal Auditor to help strengthen cybersecurity practices across our product ecosystem. In this role, your focus is strictly the "machine"—leading internal oversight to ensure our high-performance hardware, embedded systems, and connected vehicle tech remain resilient from concept to decommissioning. You will be the primary gatekeeper for our Cybersecurity Management System (CSMS) and it’s application on our vehicles, ensuring our technical work products and vehicle architectures comply with ISO/SAE 21434, UNECE R155 and the EU Cyber Resilience Act (CRA).

Requirements

Bachelor's or Master’s degree in Cybersecurity, Computer Science, Engineering, or a related technical field.
3-6 years of experience in automotive or powersport cybersecurity, embedded systems engineering, or technical IT/OT auditing within a manufacturing environment
Proven expertise in planning and conducting audits across the entire V-model lifecycle from concept to decommissioning preferably in a cyber environment
Deep understanding of ISO/SAE 21434 and UNECE R155/R156, familiarity with the EU Cyber Resilience Act (CRA)
Ability to verify end-to-end traceability between cybersecurity goals, technical requirements and verification/ validation results
Ability to articulate the impact of variances to relevant stakeholders, providing the necessary context for them to drive effective remediation.
Proficiency in translating complex technical audit findings into actionable strategic health assessments for executive leadership.
Skilled in resolving conflicts and overcoming pushback through clear communication of audit context and risk-based evidence

Responsibilities

Define audit criterias by establishing quality benchmark for the CSMS and workproducts to meet ISO/SAE 21434 and UNECE R155 ( content and container)
Execute audit plan by leading audit schedules from concept to production for all embedded systems and connected technologies.
Analyze & Report Deviations by evaluating Cybersecurity artifacts to ensure compliance with applicable standards
Support root cause analysis by partnering with vehicle engineering, powertrain, connectivity, cybersecurity, certification, manufacturing and global sourcing
Manage corrective actions by tracking remediation plans to ensure all non-compliance is resolved within defined timelines
Strategic status reporting ( internal) by providing health assessment of the cybersecurity powersports ecosystem and regulatory certification readiness