Senior Director, Product Cybersecurity

Role Overview

• Develop and maintain a comprehensive product cybersecurity architecture for our product ecosystem, ensuring alignment with industry standards and business objectives.
• Stay well-informed of emerging cybersecurity threats and technologies; continuously updating our cybersecurity strategies and solutions accordingly.
• Oversee and evaluate the implementation of cybersecurity controls, including but not limited to, encryption, access controls, network security, and secure coding practices.
• Collaborate with product development teams to incorporate cybersecurity into the design and development lifecycle of products.
• Liaise with external cybersecurity vendors and partners, managing relationships, and ensuring the effective integration of third-party security solutions.
• Responsible for career development and performance management of the team.
• Document, maintain, and lead the implementation of key activities in the cybersecurity management system.
• Conduct, with a cross-functional team, a thorough threat analysis and risk assessment for existing and new products; identifying potential vulnerabilities and proposing mitigation strategies.
• Complete the evidence to support the safety case claims for product cybersecurity.
• Ensure compliance with relevant industry, regulatory, and organizational cybersecurity standards and policies.
• Represent Torc at external standards and industry bodies and communicate our product cybersecurity approach.
• Prepare and present reports on cybersecurity architecture, risk assessments, and mitigation strategies to senior management and relevant stakeholders.
• Participate in and support product cybersecurity incident response and forensic activities.
• Coordinate and share cybersecurity information, risk assessments, and incident updates with IT and Enterprise Cybersecurity teams to ensure consistent alignment of product cybersecurity practices with enterprise-wide standards and response protocols.

Requirements

• Bachelor's Degree in Computer Science, Cybersecurity, or related technical field.
• 7+ years of experience of hands-on engineering with safety-critical, cyber-physical systems (automotive, aerospace, medical).
• 5+ years of experience managing engineers, directors, budgets, and strategic initiatives.
• Ability to be a strategic partner to the organization; identify and plan how to meet future needs of the organization on a global scale.
• Ability to effectively manage a team of professionals and identify opportunities to grow and develop the team.
• Strong understanding of cybersecurity protocols.
• Proficient in automotive cybersecurity standards and regulations (e.g., ISO/SAE 21434, UN R155).
• Proficient in a cybersecure development lifecycle such as the AVCDL (A Versatile Cybersecurity Development Lifecycle), Microsoft SDL, or similar.
• Excellent written and verbal communication skills; able to articulate complex cybersecurity concepts to a varied audience.
• Proven track record of implementing successful cybersecurity solutions in product development.

Tech Stack

• Cyber Security

Benefits

• A competitive compensation package that includes a bonus component and stock options
• 100% paid medical, dental, and vision premiums for full-time employees
• 401K plan with a 6% employer match
• Flexibility in schedule and generous paid vacation (available immediately after start date)
• Company-wide holiday office closures
• AD+D and Life Insurance