Cyber Security Analyst

Company description:

Volvo Cars

Job description: Let's introduce ourselves

At Volvo Cars, we are on a mission to provide freedom to move in a personal, sustainable, and safe way. As vehicles become increasingly connected and software-defined, cybersecurity is a critical enabler of safety, trust, regulatory compliance, and customer confidence.

We are now looking for a Senior CSMS Engineer to strengthen cybersecurity governance and engineering coordination within ConX / Head Unit Platform. The Head Unit Platform organization provides and maintains the core infotainment platform that powers the in-car experience. It is responsible for platform engineering, software releases, ECU/head unit ownership, and functional safety, ensuring a stable and scalable foundation for all customer-facing applications and vehicle functions. In this role, you will help ensure that cybersecurity activities are planned, executed, reviewed, traced, and evidenced in line with the Cybersecurity Management System (CSMS), UNECE R155, and ISO/SAE 21434 expectations.

You will work closely with Product Owners, Engineering Managers, software developers, system architects, verification teams, suppliers, Shield / central CSMS stakeholders, CSAP / Quality, and PSIRT to make ConX cybersecurity work products audit-ready and delivery-focused.

What you'll do Drive CSMS execution and coordination for ConX / Head Unit Platform cybersecurity activities across planning, development, verification, release, and post-development support

Coordinate creation, review readiness, and lifecycle maintenance of cybersecurity work products such as CSPD, TARA, Cybersecurity Concept, cybersecurity requirements, verification specifications, SWTR, CSPV, CS Case / CAC, CS-SOW, and CSJR evidence

Ensure traceability from cybersecurity requirements to verification activities, validation evidence, Software Test Reports (SWTR), and cybersecurity case evidence

Support TARA activities by facilitating risk discussions, aligning security goals and risk treatment decisions, and ensuring outputs are reflected in security concepts and requirements

Coordinate audit and homologation readiness by tracking evidence completeness, Teamcenter publication/release status, review records, and open gaps before they become certification blockers

Act as the ConX interface towards Shield / central CSMS support on CSMS questions, templates, process alignment, compliance expectations, and evidence status

Prepare and maintain CSMS delivery status, governance dashboards, risk summaries, and escalation material for Product Owners, Engineering Managers, ART leadership, and central cybersecurity stakeholders

Coordinate confirmation review and assessment preparation with CSAP / Quality, ensuring verification review findings are closed and work products are ready for independent review

Support supplier cybersecurity coordination by following up CS-SOW / CSJR expectations, supplier evidence status, and supplier-related cybersecurity risks or deviations

Contribute to vulnerability-management and PSIRT-related coordination by ensuring ConX impact assessments, remediation evidence, and updated CSMS work products are aligned when cybersecurity issues affect infotainment scope

Coach and guide ARTs and feature teams on CSMS expectations, cybersecurity documentation quality, evidence creation, and secure-by-design ways of working

Continuously improve the local ConX CSMS operating model by identifying bottlenecks, ownership gaps, recurring evidence issues, and opportunities to simplify delivery while maintaining compliance

What you'll bring

To succeed in this role, you bring strong cybersecurity process knowledge, engineering judgement, and the ability to coordinate complex technical deliveries across multiple teams:

University degree in Cybersecurity, Computer Science, Software Engineering, Electrical Engineering, Systems Engineering, or equivalent experience

7+ years of experience in cybersecurity engineering, automotive software development, system engineering, compliance engineering, product governance, or related technical roles

Solid understanding of automotive cybersecurity lifecycle activities, including cybersecurity planning, TARA, cybersecurity concepts, requirements, verification, validation, and cybersecurity cases

Practical knowledge of CSMS expectations and regulatory frameworks such as UNECE R155 and ISO/SAE 21434

Experience coordinating cybersecurity work products, evidence chains, review preparation, and audit or certification readiness activities

Ability to work across organizational boundaries with Product Owners, Engineering Managers, architects, software teams, verification teams, suppliers, and central process stakeholders

Strong communication skills with the ability to translate cybersecurity compliance needs into practical engineering actions

Structured way of working, with confidence in tracking deliverables, risks, dependencies, deviations, and decisions

Ability to challenge unclear ownership, identify traceability gaps, and drive resolution pragmatically without losing stakeholder alignment

Comfortable working in agile / ART-based development environments where compliance deliverables must be integrated into product planning and release execution