Cyber Security Analyst

Cyber Security Analyst hos Volvo Personvagnar Aktiebolag Company description: Volvo Cars Job description: Let's introduce ourselves At Volvo Cars, we are on a mission to provide freedom to move in a personal, sustainable, and safe way. As vehicles become increasingly connected and software-defined, cybersecurity is a critical enabler of safety, trust, regulatory compliance, and customer confidence. We are now looking for a Senior CSMS Engineer to strengthen cybersecurity governance and engineering coordination within ConX / Head Unit Platform. The Head Unit Platform organization provides and maintains the core infotainment platform that powers the in-car experience. It is responsible for platform engineering, software releases, ECU/head unit ownership, and functional safety, ensuring a stable and scalable foundation for all customer-facing applications and vehicle functions. In this role, you will help ensure that cybersecurity activities are planned, executed, reviewed, traced, and evidenced in line with the Cybersecurity Management System (CSMS), UNECE R155, and ISO/SAE 21434 expectations. You will work closely with Product Owners, Engineering Managers, software developers, system architects, verification teams, suppliers, Shield / central CSMS stakeholders, CSAP / Quality, and PSIRT to make ConX cybersecurity work products audit-ready and delivery-focused. What you'll do Drive CSMS execution and coordination for ConX / Head Unit Platform cybersecurity activities across planning, development, verification, release, and post-development support Coordinate creation, review readiness, and lifecycle maintenance of cybersecurity work products such as CSPD, TARA, Cybersecurity Concept, cybersecurity requirements, verification specifications, SWTR, CSPV, CS Case / CAC, CS-SOW, and CSJR evidence Ensure traceability from cybersecurity requirements to verification activities, validation evidence, Software Test Reports (SWTR), and cybersecurity case evidence Support TARA activities by facilitating risk discussions, aligning security goals and risk treatment decisions, and ensuring outputs are reflected in security concepts and requirements Coordinate audit and homologation readiness by tracking evidence completeness, Teamcenter publication/release status, review records, and open gaps before they become certification blockers Act as the ConX interface towards Shield / central CSMS support on CSMS questions, templates, process alignment, compliance expectations, and evidence status Prepare and maintain CSMS delivery status, governance dashboards, risk summaries, and escalation material for Product Owners, Engineering Managers, ART leadership, and central cybersecurity stakeholders Coordinate confirmation review and assessment preparation with CSAP / Quality, ensuring verification review findings are closed and work products are ready for independent review Support supplier cybersecurity coordination by following up CS-SOW / CSJR expectations, supplier evidence status, and supplier-related cybersecurity risks or deviations Contribute to vulnerability-management and PSIRT-related coordination by ensuring ConX impact assessments, remediation evidence, and updated CSMS work products are aligned when cybersecurity issues affect infotainment scope Coach and guide ARTs and feature teams on CSMS expectations, cybersecurity documentation quality, evidence creation, and secure-by-design ways of working Continuously improve the local ConX CSMS operating model by identifying bottlenecks, ownership gaps, recurring evidence issues, and opportunities to simplify delivery while maintaining compliance What you'll bring To succeed in this role, you bring strong cybersecurity process knowledge, engineering judgement, and the ability to coordinate complex technical deliveries across multiple teams: University degree in Cybersecurity, Computer Science, Software Engineering, Electrical Engineering, Systems Engineering, or equivalent experience 7+ years of experience in cybersecurity engineering, automotive software development, system engineering, compliance engineering, product governance, or related technical roles Solid understanding of automotive cybersecurity lifecycle activities, including cybersecurity planning, TARA, cybersecurity concepts, requirements, verification, validation, and cybersecurity cases Practical knowledge of CSMS expectations and regulatory frameworks such as UNECE R155 and ISO/SAE 21434 Experience coordinating cybersecurity work products, evidence chains, review preparation, and audit or certification readiness activities Ability to work across organizational boundaries with Product Owners, Engineering Managers, architects, software teams, verification teams, suppliers, and central process stakeholders Strong communication skills with the ability to translate cybersecurity compliance needs into practical engineering actions Structured way of working, with confidence in tracking deliverables, risks, dependencies, deviations, and decisions Ability to challenge unclear ownership, identify traceability gaps, and drive resolution pragmatically without losing stakeholder alignment Comfortable working in agile / ART-based development environments where compliance deliverables must be integrated into product planning and release execution Kategori: Data/IT Anställning: Vanlig anställning Varaktighet: Tills vidare Omfattning: Heltid Plats: Gothenburg Källa: CVPortalen.se