Cybersecurity Management System (CSMS) Process Architect

Location: 100% remote work from Poland, with a requirement to travel to Sweden for approximately 2 days per month Salary: 170 – 210 PLN net/h (B2B via Experis) Responsibilities: • Develop and maintain the Cybersecurity Management System (CSMS) process architecture. • Ensure compliance with UNECE R155, ISO/SAE 21434, and other applicable cybersecurity regulations. • Define cybersecurity governance, roles, responsibilities, and KPIs. • Align organizational CSMS requirements with project and product development activities. • Support implementation of tools, methods, and processes required for CSMS execution. • Prepare for and participate in internal and external audits and certification reviews. • Conduct compliance assessments and gap analyses across brands, projects, and suppliers. • Support engineering teams regarding cybersecurity requirements, ECU and HPC cybersecurity artefacts, and process compliance. • Drive certification and surveillance activities for global markets, including South Korea, China, Taiwan, India, and other regions. Occasional international travel may be required. Requirements: • Strong experience in Automotive Cybersecurity, Cybersecurity Governance, or CSMS implementation. • Hands-on experience with ISO/SAE 21434 and UNECE R155/R156 compliance activities. • Experience defining, implementing, and auditing cybersecurity management processes. • Background in systems architecture, embedded systems, vehicle cybersecurity, or systems engineering. • Experience working within automotive OEMs, Tier-1 suppliers, or similarly regulated product development environments. • Strong stakeholder management and cross-functional leadership skills. • Working knowledge of: Threat Analysis and Risk Assessment (TARA), Vulnerability Management, Penetration Testing, Requirements Traceability and Compliance Management Preferred Qualifications: • Experience with GB44495 or other regional cybersecurity regulations. • Experience supporting vehicle cybersecurity certifications and regulatory audits. • Knowledge of supplier cybersecurity governance and CS-DIA agreements. • Familiarity with ISO 9001, IATF 16949, and ISO 27001 frameworks. • Knowledge of development processes, SAFe, or governance models. • Relevant certifications such as CISSP, CISM, or formal ISO/SAE 21434 training. Our offer: • MultiSport Plus • Group insurance • Medicover Premium