Product Cybersecurity & Compliance Manager

Strattec Security Corp.•Auburn Hills, MI

About The Position

The Product Cybersecurity & Compliance Manager establishes, harmonizes, implements, and oversees product Cybersecurity Management System (CSMS) and Software Update Management System (SUMS) processes, leading implementation of the end-to-end cybersecurity lifecycle. The role also oversees the continued evolution and rollout of supporting ASPICE and Functional Safety (FuSa) frameworks. Serving as a central technical authority, the manager connects engineering, quality, manufacturing, and global customers. The position has no direct reports but requires technical leadership of cross-functional project teams and authority to independently escalate critical concerns directly to executive leadership.

Requirements

Bachelor of Science in an engineering field; Electrical/Electronics or Computer Engineering is strongly preferred.
At least 5 years of direct experience in CSMS process development and governance (ISO 21434).
Strong oral and written English skills.
Strong technical writing skills.
Ability to represent information effectively and respond to questions in meetings, including with customers and executive leadership.

Nice To Haves

At least 3 years of experience in ASPICE and Functional Safety (ISO 26262) process development and compliance.
Deep understanding of UN Regulations UN R155 and UN R156, and working knowledge of ISO 21434, ISO 24089, ISO 26262, and ASPICE frameworks.
Proficiency with ALM systems such as PTC Integrity or Codebeamer and expert proficiency with Microsoft Office tools.
Familiarity with fuzz testing, penetration testing, CI/CD pipelines, and Agile workflows.
TÜV/INTACS certified assessor for Cybersecurity, FuSa, or ASPICE.
Broad understanding of embedded software, electrical systems, vehicle communication protocols, controls, and secure design controls such as secure flashing, secure communication, and data management.
General understanding of hardware and mechanical design, manufacturing, quality assurance, and after-sales support.

Responsibilities

Establish internal CSMS and SUMS processes and lead corporate governance aligned with ISO 21434 and ISO 24089.
Plan, support, and review engineering security work products, including TARA, cybersecurity concepts, and verification evidence.
Manage product security operations, including vulnerability management, incident response, and secure production software transfers.
Ensure implementation of adequate product security solutions and approved security measures.
Integrate engineering processes into a unified framework supporting CSMS, SUMS, FuSa, and ASPICE.
Oversee system and software development processes aligned with ASPICE, enforce bi-directional traceability, perform SQA activities, and lead gate reviews.
Oversee Functional Safety work products, including HARA, FMEA/SW FMEA, FTA, and safety concepts, in alignment with ISO 26262.
Coordinate across Engineering, Program Management, IT, Manufacturing, Quality, Purchasing, and Human Resources.
Own the technical interface with global customers and suppliers, and manage Cybersecurity Interface Agreements and Development Interface Agreements.
Track and report process maturity and compliance KPIs, conduct internal audits, drive continuous improvement, and coordinate external assessments for global certifications.
Define customized process compliance models for new business awards based on customer requirements.
Provide technical guidance to software project teams and independently escalate critical issues to seek immediate support for resolution.