Product Cybersecurity & Compliance Manager

Strattec Security•Auburn Hills, MI

About The Position

The Product Cybersecurity & Compliance Manager establishes, harmonizes, implements, and oversees product cybersecurity management system (CSMS) and software update management system (SUMS) processes. The role leads implementation of the end-to-end cybersecurity lifecycle and supports the continued evolution and rollout of ASPICE and Functional Safety (FuSa) frameworks. It serves as a central technical authority connecting engineering, quality, manufacturing, and global customers. The position has no direct reports but provides technical leadership to cross-functional project teams and has authority to escalate critical concerns directly to executive leadership. The role governs product cybersecurity and software update processes in alignment with ISO 21434 and ISO 24089; supports project teams in producing and reviewing security work products; and manages vulnerability response, incident response, and secure production software transfers. It also integrates CSMS, SUMS, FuSa, and ASPICE processes; oversees software and system development process compliance, traceability, software quality assurance, and gate reviews; and oversees functional safety work products aligned with ISO 26262. The manager coordinates across internal functions and serves as the technical interface for global customers and suppliers. Responsibilities include managing cybersecurity and development interface agreements, tracking compliance and process-maturity KPIs, conducting and coordinating audits and assessments, defining compliance models for new business awards, and leading project teams through technical guidance and escalation.

Requirements

Bachelor of Science in an engineering field; Electrical/Electronics or Computer Engineering is strongly preferred.
At least 5 years of direct experience in CSMS process development and governance (ISO 21434).
Deep understanding of UN Regulations UN R155 and UN R156, and working knowledge of ISO 21434, ISO 24089, ISO 26262, and ASPICE frameworks.
Proficiency with Application Lifecycle Management systems such as PTC Integrity or Codebeamer, and expert proficiency with Microsoft Office tools.
Familiarity with security testing methods, including fuzz testing and penetration testing, CI/CD pipelines, and Agile workflows.
Broad understanding of embedded software, electrical systems, vehicle communication protocols, controls, and secure design controls such as secure flashing, secure communication, and data management.
General understanding of hardware and mechanical design, manufacturing, quality assurance, and after-sales support.
Strong oral and written English skills, strong technical writing skills, and ability to represent information and respond to questions in meetings with customers and executive leadership.

Nice To Haves

At least 3 years of experience in ASPICE and Functional Safety (ISO 26262) process development and compliance.
TÜV or intacs certified assessor for Cybersecurity, FuSa, or ASPICE.

Responsibilities

Establish internal CSMS and SUMS processes and lead corporate governance aligned with ISO 21434 and ISO 24089.
Plan, support, and review cybersecurity engineering work products, including TARA, cybersecurity concepts, and verification evidence, alongside project teams.
Manage product security operations, including vulnerability management, incident response, and secure production software transfers.
Ensure implementation of adequate product security solutions and approved security measures.
Integrate engineering processes into a unified framework supporting CSMS, SUMS, FuSa, and ASPICE.
Oversee system and software development processes aligned with ASPICE; enforce bidirectional traceability from stakeholder requirements through architecture and verification testing.
Perform Software Quality Assurance activities and lead gate reviews.
Oversee functional safety work products, including HARA, FMEA/SW FMEA, FTA, and safety concepts, in alignment with ISO 26262.
Coordinate across Engineering, Program Management, IT, Manufacturing, Quality, Purchasing, and Human Resources.
Own the technical interface with global customers and suppliers, and manage Cybersecurity Interface Agreements (CIAs) and Development Interface Agreements (DIAs).
Track and report KPIs on process maturity and compliance health; conduct periodic internal audits and coordinate external assessments to maintain global certifications.
Define customized process compliance models for new business awards based on customer requirements.
Lead software project teams through technical guidance and independently escalate critical issues to executive leadership for support and resolution.