Automotive Cybersecurity Compliance Consultant

🌍 100% remote work (depending on client/project needs) 📚 Versatile Growth: Learn new languages and technical certifications with our Expleo Academy.🌴 Time for You: Enjoy 24 vacation days per year, plus December 24th and 31st.🤝 Unbeatable Environment: A place where support between colleagues is the norm and competitiveness has no place.🏃‍♂️ Connection and Well-being: At Expleo, laughter is never lacking, and fun is guaranteed. Participate in our padel and running club, summer events, Halloween… and much more!💳 Flexible Benefits: Medical insurance, restaurant vouchers, and childcare… you choose how to use them!

• Solid experience in automotive cybersecurity or in connected embedded systems.
• Practical knowledge applying:
  • ISO/SAE 21434
  • UNECE R155 (CSMS)
  • ISO 26262 and safety–security interaction
• Experience in risk analysis and treatment (TARA) and the generation of deliverables.
• Ability to manage projects, milestones, risks, and reporting.
• Good communication skills with both technical and non-technical profiles.
• Experience in automotive quality environments, ASPICE, and audits.

• Previous experience with manufacturers or Tier 1 suppliers in the automotive sector.
• Participation in regulatory audits or cybersecurity certifications.
• Knowledge of vulnerability management processes (CVE, CVSS, disclosure).

You will be part of cutting-edge projects in the automotive sector, working on the development of connected vehicles and systems where cybersecurity is key. You will integrate into a technical, collaborative, and innovative environment, participating in initiatives with real impact and continuous support from the team.

• Define and lead cybersecurity requirements in connected systems and vehicles throughout their entire lifecycle.
• Implement and maintain cybersecurity activities and deliverables in accordance with ISO/SAE 21434 (from concept to operation and maintenance).
• Perform and lead TARA analyses, identifying threats, assessing risks, and ensuring the correct traceability of mitigations.
• Guarantee compliance with UNECE R155 (CSMS) in projects and programs, preparing evidence and participating in audits.
• Coordinate the integration between cybersecurity and functional safety (ISO 26262), aligning requirements and impact analyses.
• Define, manage, and trace security requirements through to verification and validation activities.
• Manage risks, deviations, and remediation plans alongside various stakeholders.
• Plan and coordinate cybersecurity validation activities: threat modelling, vulnerability analysis, hardening, and penetration testing.
• Prepare and maintain key documentation: Cybersecurity Plan, Concept, Case, risk reports, and traceability matrices.
• Participate in vulnerability management, incidents, and coordination with suppliers and the supply chain.