Lead Product Security Auditor (m/w/d)
Core
Design and manage the global product cybersecurity audit framework, including methodology, templates, reporting structures, and audit cycles.
Role type
Senior IC product security auditor (framework & program lead)
Builds
Global product cybersecurity audit framework and audit execution across product divisions
Domain
Cybersecurity, automotive/aerospace product security, regulatory compliance
Required skills
Product cybersecurity audit, secure product development, cybersecurity standards (IEC 62443, ISO 27001), TARA, SBOM/HBOM, vulnerability management, incident handling, audit framework design, program leadership, stakeholder communication
Preferred skills
Auditor certifications (ISO 27001 Lead Auditor, TISAX, IEC 62443), German language proficiency
Technologies
IEC 62443, ISO 27001, UNECE R155/R156, Aerospace standards
Responsibilities
Design and manage the global product cybersecurity audit framework; Plan, coordinate, and lead audits across all product divisions and sites; Conduct high-priority and complex audits for critical or high-risk products; Lead and guide other auditors; Evaluate secure development processes, threat/risk analyses, software update mechanisms, and SBOM/HBOM practices; Interface with product teams, engineering, compliance, and management to drive remediation; Report audit results to executive stakeholders; Monitor and interpret emerging cybersecurity regulations; Build internal competence by training and mentoring new auditors
Seniority
Senior, hands-on IC with program leadership
