Cybersecurity FOSS Manager- GISACC

Job Description

MissionManage a dedicated Cybersecurity scope (Center) and the associated team:

• Suggest the organization among the Center
• Manage the dedicated team
• Define/update the processes of the Center, implement their deployment, control their good applicability, and follow the corresponding action plans
• Manage the projects of the Center
• Perform the Cybersecurity watch related to the Center
• Contribute to the evolution of the CSMS (CyberSecurity Management System), including CSMS-I (for Information Systems) and CSMS-V (for Vehicle & Product)
• Ensure the associated training and communication, and contribute to develop the Cybersecurity mindset within the company

ResponsibilitiesAccountability

• Manage the dedicated team
  • Manage the careers
  • Enhance team efficiency
  • Ensure upstream and downstream communication
  • Perform day-to-day management
• Define/update the processes of the Center, implement their deployment, control their good applicability, and follow the corresponding action plans
  • Define/update the corresponding processes
    • In terms of organization, methodology, tools, reporting, continuous improvement
    • In accordance with Valeo CSMS, including CSMS-I and CSMS-V, Cybersecurity standards, regulations, best practices and/or needs, Valeo environment (organization, evolutions, methodology, tools)
  • Manage internal documentation to ensure processes are well documented
  • Implement and deploy the processes taking into account Valeo organization
    • Provide the training supports and train the relevant actors
    • Coordinate the relevant actors to reach the aims of the Center
  • Create control tools when needed and control:
    • The appropriate usage of the Center tools
    • The respect of the methodologies
    • The accuracy of the end-users reporting
  • Follow the different action plans related to the Center
  • Provide the expected KPIs
  • Enhance the processes in a continuous improvement strategy
• Manage the projects of the Center
  • Study the market to know the different solutions in relation with the Center
  • Write the RFPs (Request For Proposal) and analyze the answers
  • Suggest which supplier/solution to choose in coordination with the other departments
  • Manage the project(s) to implement the solution(s) within Valeo IS:
    • Organization (team, governance?)
    • Planning
    • Committees
    • Implementation of the chosen solution(s)/tool(s)
    • Reporting
  • Manage the third parties (suppliers, partners)
• Perform the Cybersecurity watch related to the Center
  • Continuously learn all topics related to the Center (law and regulatory requirements, standards, best practices, solutions?) and share the major points within the Cybersecurity organization
  • Raise to the management and to the Cybersecurity Center team any critical or major change in the standards/regulations or technical requirements linked to the Center
  • Cultivate relations with external actors working in a similar activity
• Ensure the associated training and communication, and contribute to develop the Cybersecurity mindset within the company
  • Answer to questions related to the Center during audits (internal, external, client...)
  • Whenever needed, train, communicate, and provide support to the teams so that they respect the Valeo CSMS, including CSMS-I and CSMS-V, the standards and/or the regulatory requirements related to the Center
  • Respond to requests from the various Valeo entities

Responsibility

• Define the organization among the Center
  • Define the organizational and technical measures to be implemented to achieve the objectives of the Cybersecurity Center, and submit it for approval to the Group Cybersecurity VP
• Manage the dedicated team
  • Recruit team members
• Define/update the processes of the Center, implement their deployment, control their good applicability, and follow the corresponding action plans
  • Based on the Valeo CSMS, including CSMS-I and CSMS-V, requirements, write the Cybersecurity rules related to the ?Center?
  • Industrialize the way to provide the KPI of the Center

Contribution

• Contribute to the evolution of the CSMS (CyberSecurity Management System), including CSMS-I (for Information Systems) and CSMS-V (for Vehicle & Product)
  • Based on the Center activity and specific needs/constraints, suggest improvement of the Valeo CSMS, including CSMS-I and CSMS-V
  • Request the authorization to have an exemption to the Valeo CSMS, including CSMS-I and CSMS-V, whenever it is mandatory to fulfill a law/regulation linked to the Center activity
• Ensure the associated training and communication, and contribute to develop the Cybersecurity mindset within the company
  • Promote Cybersecurity within the company
  • Contribute to improving the level of Cybersecurity maturity within Valeo
• Other
  • Contribute to the definition of the budget for the ?Center?
  • Contribute to the remediation of the Cybersecurity incidents

Required: Master?s degree in Computer Science and/or CybersecurityOptional: Certification(s) related to the Center activity or similar ones

• >10 years of relevant experience in Cybersecurity
• Knowledge and experience linked to the Center as well as Cybersecurity standards (ISO 2700x, ISO/SAE 21434, NIST, NIS?)
• Ability to interact with a broad cross-section of personnel to explain and enforce security measures
• Management experience

Keyskills :