Purpose of the role :

The Cyber Security Engineer is responsible for standardising and managing cybersecurity for EEE/EV/HEV components, subsystems and vehicle systems designed and developed for 2W/3W/4W vehicles under development at TVS Motor Company.

Main responsibilities :

- Perform Threat Analysis and Risk Assessments (TARA).

- Develop robust security concepts and solutions tailored to project/client needs, including adherence to industry standards and frameworks.

- Perform security audits and assessments, providing detailed reports and recommendations for improvement.

- Collaborate with cross-functional teams to ensure cybersecurity measures are integrated seamlessly into projects.

- Deliver cybersecurity work products across the vehicle lifecycle in accordance with a Cyber Security Management System (CSMS).

- Manage the delivery of cybersecurity work products in accordance with CSMS, including those agreed within supplier CIADs.

- Support the development of best-practice working procedures for cybersecurity activities.

- Stay updated with the latest cybersecurity trends, threats and technologies to continuously enhance service offerings.

- Ensure all cybersecurity artefacts are written, maintained/updated, released and traceable, managed in Codebeamer ALM, with process adherence and design reviews conducted as per Norton Single Point Lessons and/or relevant TVS/Norton guidelines.

- Organise and, where necessary, support or witness penetration testing either internally or through external test houses.

- Create a gateway template aligned with Norton/TVS PLM gateways.

Key responsibilities :

- Analyse specific cybersecurity requirements for safety in terms of ISO/SAE 21434, UNECE R155 and R156.

- Define necessary processes and working models with a clear responsibility chart throughout the process to achieve functional safety requirements, including item definition, asset list, attack path, damage scenario, threat scenario, cybersecurity goals and cybersecurity traceability report.

- Conduct and steer relevant activities required from the defined cybersecurity development process for each project.

- Create and standardise cybersecurity goals.

- Conduct and review TARA risk analysis.

- Report and present cybersecurity updates to stakeholders at all levels.

- Approve cybersecurity concepts.

- Manage the definition of penetration test requirements.

- Support system engineering to ensure ISO/SAE 21434-compliant system architecture in the early phase of projects.

- Prepare visualisation dashboards in Codebeamer to display metrics.

- Ensure correct process definition.

- Manage the introduction, review and supervision of design reviews.