Product Cybersecurity Manager

About the role

Embotech, a software scale-up developing autonomous driving technology for private ground applications such as trucks at port terminals and passenger cars in factories, is looking for an experienced Product Cybersecurity Manager based in Zurich or Munich. The role covers identifying, mitigating and managing cybersecurity risk across all products and ensuring compliance with cybersecurity standards and regulations.

Key responsibilities

• Perform TARA and vulnerability analyses under IEC 62443 and related standards
• Work with the Functional Safety manager on safety-relevant cyber risks
• Develop cybersecurity and requirements with the cybersecurity architect and product technical leads
• Define and support cybersecurity verification and validation activities
• Maintain risk and vulnerability registers and manage supply-chain security risks
• Lead vulnerability disclosure, management and incident response for Embotech products
• Own cybersecurity policies, procedures, training and culture
• Ensure product compliance with the Machinery Regulation, CRA and other frameworks
• Support other areas in assessing and mitigating information and cybersecurity risks

Required profile

• Degree or vocational training in information security, computer science or a related field
• 5+ years of hands-on cybersecurity experience, ideally in industrial automation/OT or automotive
• Experience managing supply-chain risks, vulnerabilities and security incidents
• Fluent English; German is an advantage

Required skills

• Practical experience with TARA, threat modelling and vulnerability analysis under IEC 62443 or ISO 21434
• Working knowledge of secure development processes, from security concept to V&V
• Familiarity with functional safety (IEC 61508, ISO 13849, ISO 26262)
• Nice to have: IEC 62443 training, knowledge of C++, Linux, Docker and AWS, CSMS or ISMS experience, end-to-end product security ownership