System of Systems (So

About the role

Establish, maintain, and continuously evolve the SoS-level cybersecurity framework. You ensure effective process governance, enable risk-based decision-making, coordinate security verification activities, and provide transparency to stakeholders across vehicle, cloud, and system teams. This position combines elements of Information Systems Security Management, Cybersecurity Management, and System Security Management to reflect the complexity of SoS environments.

What you'll do

• Define and document the security relevance, scope, and expectations of the SoS and all affected subsystems.
• Establish, govern, and continuously improve the SoS cybersecurity process landscape, including deliverables, checkpoints, acceptance criteria, and release readiness.
• Coordinate and oversee the planning, execution, and completion of all SoS security activities without executing them yourself.
• Create, maintain, and communicate the SoS Security Status Report, providing transparency to leadership and stakeholders.
• Compile and structure complete SoS security documentation and evidence into a coherent SoS Security Case.
• Document security risk acceptance decisions and ensure lifecycle-wide traceability, including transfer of residual risks.
• Align security-relevant activities across teams and domains to ensure consistency and eliminate gaps.
• Advise project teams on security-related matters and represent the SoS security position in governance forums.

What you'll need

• A degree in computer science, cybersecurity, engineering, or a comparable technical field.
• Experience in cybersecurity governance, assurance, risk management, or compliance-focused roles.
• Strong understanding of structured assurance approaches, including Security Case creation.
• Solid knowledge of ISO/SAE 21434, NIST-based cybersecurity processes, and UN ECE R155.
• Confidence in documentation, process governance, reporting, and compliance management.
• Experience introducing or maturing security processes in complex organizations.
• Excellent stakeholder management and communication skills in cross-functional environments.
• Business-level fluency in English, both written and spoken.

Nice to have

• Familiarity with security testing, vulnerability management, or verification results.

What they offer

• Competitive salary including bonus
• Hybrid work setup with flexibility to work from home or offices
• Flexible working hours and work arrangements
• Fully subsidized public transport ticket and MOIA ride discounts
• 30 vacation days, sabbatical and unpaid leave option
• Continuous learning environment with training, coaching, and conferences