Cybersecurity Management System (CSMS) Process Architect

Location: 100% remote work from Poland, with a requirement to travel to Sweden for approximately 2 days per month
Salary: 170 – 210 PLN net/h (B2B via Experis)


Responsibilities: 
•    Develop and maintain the Cybersecurity Management System (CSMS) process architecture.
•    Ensure compliance with UNECE R155, ISO/SAE 21434, and other applicable cybersecurity regulations.
•    Define cybersecurity governance, roles, responsibilities, and KPIs.
•    Align organizational CSMS requirements with project and product development activities.
•    Support implementation of tools, methods, and processes required for CSMS execution.
•    Prepare for and participate in internal and external audits and certification reviews.
•    Conduct compliance assessments and gap analyses across brands, projects, and suppliers.
•    Support engineering teams regarding cybersecurity requirements, ECU and HPC cybersecurity artefacts, and process compliance.
•    Drive certification and surveillance activities for global markets, including South Korea, China, Taiwan, India, and other regions. Occasional international travel may be required.


Requirements:
•    Strong experience in Automotive Cybersecurity, Cybersecurity Governance, or CSMS implementation.
•    Hands-on experience with ISO/SAE 21434 and UNECE R155/R156 compliance activities.
•    Experience defining, implementing, and auditing cybersecurity management processes.
•    Background in systems architecture, embedded systems, vehicle cybersecurity, or systems engineering.
•    Experience working within automotive OEMs, Tier-1 suppliers, or similarly regulated product development environments.
•    Strong stakeholder management and cross-functional leadership skills.
•    Working knowledge of: Threat Analysis and Risk Assessment (TARA), Vulnerability Management, Penetration Testing, Requirements Traceability and Compliance Management
 
Preferred Qualifications:
•    Experience with GB44495 or other regional cybersecurity regulations.
•    Experience supporting vehicle cybersecurity certifications and regulatory audits.
•    Knowledge of supplier cybersecurity governance and CS-DIA agreements.
•    Familiarity with ISO 9001, IATF 16949, and ISO 27001 frameworks.
•    Knowledge of development processes, SAFe, or governance models.
•    Relevant certifications such as CISSP, CISM, or formal ISO/SAE 21434 training.


Our offer:
•    MultiSport Plus
•    Group insurance
•    Medicover Premium