Cybersecurity Management System (CSMS) Process Architect

Location: 100% remote work from Poland, with a requirement to travel to Sweden for approximately 2 days per month

Salary: 170 – 210 PLN net/h (B2B via Experis)

Responsibilities:

• Develop and maintain the Cybersecurity Management System (CSMS) process architecture.
• Ensure compliance with UNECE R155, ISO/SAE 21434, and other applicable cybersecurity regulations.
• Define cybersecurity governance, roles, responsibilities, and KPIs.
• Align organizational CSMS requirements with project and product development activities.
• Support implementation of tools, methods, and processes required for CSMS execution.
• Prepare for and participate in internal and external audits and certification reviews.
• Conduct compliance assessments and gap analyses across brands, projects, and suppliers.
• Support engineering teams regarding cybersecurity requirements, ECU and HPC cybersecurity artefacts, and process compliance.
• Drive certification and surveillance activities for global markets, including South Korea, China, Taiwan, India, and other regions. Occasional international travel may be required.

Requirements:

• Strong experience in Automotive Cybersecurity, Cybersecurity Governance, or CSMS implementation.
• Hands-on experience with ISO/SAE 21434 and UNECE R155/R156 compliance activities.
• Experience defining, implementing, and auditing cybersecurity management processes.
• Background in systems architecture, embedded systems, vehicle cybersecurity, or systems engineering.
• Experience working within automotive OEMs, Tier-1 suppliers, or similarly regulated product development environments.
• Strong stakeholder management and cross-functional leadership skills.
• Working knowledge of: Threat Analysis and Risk Assessment (TARA), Vulnerability Management, Penetration Testing, Requirements Traceability and Compliance Management Preferred Qualifications:
• Experience with GB44495 or other regional cybersecurity regulations.
• Experience supporting vehicle cybersecurity certifications and regulatory audits.
• Knowledge of supplier cybersecurity governance and CS-DIA agreements.
• Familiarity with ISO 9001, IATF 16949, and ISO 27001 frameworks.
• Knowledge of development processes, SAFe, or governance models.
• Relevant certifications such as CISSP, CISM, or formal ISO/SAE 21434 training.

Our offer:

• MultiSport Plus
• Group insurance
• Medicover Premium