OT Cybersecurity Manager

Merak
is the recognized global market leader in Rail HVAC. The brand displays a global competence across all rail transport markets, all types of rail vehicle, all HVAC functions, and all phases of the value-chain. It delivers highly advanced HVAC passenger solutions for health and comfort as well as HVAC environment and energy solutions for a green future.

We are currently looking to add a
Cybersecurity Manager
to our team, based in Madrid.

About the Role:

• Transpose the Global Cybersecurity Product Strategy into the HVAC Business Unit solutions, based on business strategy and business priority of the organization.
• Implement and apply the product Global cybersecurity governance framework and processes to the Business Unit and CoCs.
• Implement the product security lifecycle process in the HVAC organization.
• Establish and maintain a process for the local organization's asset classification to ensure that measures taken to protect solutions are proportional to their business value and criticality for safety.
• Develop and maintain a product cybersecurity program to implement the strategy for the organization and continuously improve maturity.
• Implement an apply the Global risk management process and risk assessment methodology for cyber-risks for the local organization and its supply chain.
• Ensure that risk assessments, vulnerability assessments and threat analyses are conducted periodically and in line with the global cybersecurity processes issued by the CoC for Product Cybersecurity.
• Recommend controls, safeguards, and countermeasures to effectively eliminate, mitigate or transfer cyber-risks in local organizations solutions and in components down the supply chain, and coordinate these with the CoC for Product Cybersecurity.
• Identify internal and external influences on the local organization (e.g. technology, business environment, risk tolerance, geographic location, legal and regulatory requirements, customers) to ensure that these factors are addressed by the product cybersecurity strategy
• Apply and oversee the effective use of the Global Incident Management process in the local organization.
• Audit critical parts of the local organization to validate that risk management is being done correctly.
• In coordination with the CoC Product Cybersecurity, establish, monitor, evaluate and report metrics, key performance indicators, key risk indicators to provide management with accurate information regarding the effectiveness of the product cybersecurity strategy, cybersecurity program and cyber risk management.

Requirements
:

• Academic or professional education in industrial, telecommunications, computer, or similar engineering or similar.
• +10 years of experience developing similar functions (Offensive Cybersecurity, Defensive Cybersecurity, Cyber Risk Management, Product Cybersecurity, Project Management, Industrial Cybersecurity).
• Knowledge in Cybersecurity norms, Cyber risk management, and Product and Industrial Cybersecurity.
• Experience in Programming platforms based on microcontroller (embedded SW) and with Operating Systems.
• Software analysis and design techniques, standards and methodologies for application to SW development.
• Experience with communication protocols and field buses.

Benefits:

• Permanent employment within the team.
• Opportunity for professional growth and development.
• Partial remote work options.
• Additional benefits.

We appreciate your application and interest, we look forward to meeting your talent

Merak stands for sustainable health & comfort in Rail HVAC all-round (world-wide, across all modes, and over the entire life-cycle), delivering advanced solutions and services with an attractive and competitive quality, cost, and delivery schedule.