Address
Form of workAbout us
We see a future where everyone can live and move without limitations. That’s why we are developing technologies, systems and concepts that make vehicles safer and cleaner, while serving our communities, the planet and, above all, people.
Forward. For all.
Group Summary
Magna is more than one of the world’s largest suppliers in the automotive space. We are a mobility technology company built to innovate, with a global, entrepreneurial-minded team. With 65+ years of expertise, our ecosystem of interconnected products combined with our complete vehicle expertise uniquely positions us to advance mobility in an expanded transportation landscape.
About the Role
The Product Security IR Analyst role is a crucial part of Magna's central Information Security Risk & Compliance (ISRC) team. This position will serve as a primary point of contact in matters related to product cybersecurity vulnerability monitoring, management, and reporting.
The Product Security IR Analyst will be the primary team member from the ISRC to utilize our global threat intelligence & vulnerability management tool. This role will work closely with leads from each of our unique business units to coordinate continual cybersecurity activities related to our products.
Your Responsibilities
• Manage the central vulnerability monitoring & management tool
• Work with Product Security engineering teams to analyze and assess potential vulnerabilities
• Track and report status of reported vulnerabilities
• Develop and document Product Security incident response policies based on industry standards and best practices
• Collaborate with business units to establish incident response playbooks and guidelines
• Create playbooks and best practices for Product Security incident response
Who we are looking for
• Bachelor's degree or equivalent experience in a related technical field
• 4+ years of relevant experience in cybersecurity vulnerability monitoring, management, and/or incident response (automotive product preferred)
• Proficiency in learning and adapting to new, advanced software tools
• Working knowledge of cybersecurity risk management frameworks and compliance practices
• Comfortable conveying information effectively and professionally to a wide variety of technical and non-technical audiences
Your preferred qualifications
• Expert knowledge of industry standards related to product cybersecurity & incident response (ISO/SAE 21434 preferred)
What we offer
Site Benefits
Information regarding our benefits will be provided during the recruitment process.
