OurCybersecurity Governance Organizationis looking for aCybersecurity Advisorto start working directly within ourCybersecurity Advisory teamin ourPune siteinIndia.New trends and expectations are reshaping the automotive industry. Inspired by the exciting new challenges associated with this revolution, Forvia anticipates the future of mobility developing cutting-edge solutions for smart life on board and sustainable mobility. If you're willing to contribute and create value for tomorrow's cleaner and smarter mobility, Forvia is the place to be.Your main missionThe role of theCybersecurity Advisoris to ensure proper cybersecurity risk management in IT projects or relevant IT changes, in close collaboration with our Business, the Group Cybersecurity department and the overall IT organization.The essential responsibilities and dutiesCapturing the detailed context information and business needs for each project and major IT change (what is required, who are the users, what are the project deadlines and sponsors, who are the administrators, what are the applicable regulations, etc.)Translating this information into technical details (what are the networks and systems involved, what is the level of criticity of the data handled, what are the applicable Recovery Time and Point Objectives, etc.)Performing an appropriate risk analysis (what are the most important risks that we can foresee based on the information above) and based on that:Defining the mandatory Cybersecurity requirements (e.g., which authentication, filtering, encryption, content inspection, hardening, logging, monitoring, etc. measures are necessary) based on this risk analysis.Identifying the necessary controls (e.g., intrusion tests, audits, etc.) and the proper organization to ensure that all cybersecurity aspects are managed in an efficient way.Ensuring a proper handover and understanding of these requirements and controls to/by the project teamIf necessary and applicable:Requesting the necessary changes in our Cybersecurity policiesAdvising the Awareness and Education team about the necessary awareness and/or training programsRequesting the necessary audits to the Risk & Compliance teamVerify that all items above were properly followed and implemented.Reporting monthly the requests under evaluation, requests confirmed and moving to project phase and requests discarded. Establishing and keeping all the necessary networking with all key relevant stakeholders in the Business and IT departmentsQualifications and skillsEducation and experienceMinimum 3 years of increasing / successful responsibility / experience on at least half of the above duties.Experienced in IT projects and operations.Knowledge of both theoretical and practical aspects of CyberSecurityCybersecurity certifications are a relevant plus.Key competenciesRigor, methodologyCritical thinking and problem-solving skillsPlanning, organizing, structuring.Decision-makingCuriosityCommunication skills (written and verbal)Influencing, convincing, leadingTeamworkConflict managementFlexibilityStress tolerance.LanguagesEnglish: fluent (spoken and written)French and/or German is a plus.15% willingness to travel, also intercontinental.
