Job Description:
As a Cyber Security Consultant, you will play a vital role in ensuring the organization's systems and data remain secure.
Main Responsibilities:
* IDentify systems subject to cybersecurity regulations (e.g., UN ECE R155).
* Create, update, and maintain Data Flow Diagrams and Software Design Documents.
* Ensure compliance with the organization's Cyber Security Management System (CSMS).
* Participate in system design meetings to assess cybersecurity risks and define related tasks; document and distribute meeting minutes.
* Collaborate regularly with Enterprise Architects to design or update systems in alignment with IT standards.
* Perform Threat Analysis and Risk Assessment (TARA) on systems and deliver detailed reports.
* Define mitigation strategies and convert them into actionable items for development teams.
* Design, assign, and execute mitigation tests; collect and centralize related evidence.
* Verify mitigation implementations, identify any residual risks, and document them accordingly.
* Review all cybersecurity-related documentation with relevant internal cybersecurity teams.
* Assess system vulnerabilities based on severity, context (e.g., cloud images vs. application libraries), and relevance; communicate findings to development teams.
Additional Requirements:
* Familiarity with lean principles and continuous improvement methodologies.
* Knowledge of ISO/SAE 21434 and ISO 26262 standards.
* Strong analytical and problem-solving skills.
* Fluent in English with excellent presentation skills.
This is an exciting opportunity for someone who is passionate about cybersecurity and has a strong analytical mind.