IVI Cybersecurity

Role Overview

• Responsible for cybersecurity (CS) development and compliance for In-Vehicle-Infotainment (IVI) and related connected systems.
• The role covers cybersecurity design, development, supplier coordination, and validation support in line with UN-R155/156 (AIS 189/190) and internal CSMS/SUMS processes.

Key Responsibilities

• Perform cybersecurity relevance assessment, development planning, and implementation management as per ISO/SAE 21434 and deliver cybersecurity work products.
• Perform Threat Analysis and Risk Assessment and create system/ECU level technical requirements and evaluation specifications according to CS Concept and CS Goals.
• Review and align detailed design specifications for cybersecurity along with suppliers and business partners and assess corresponding validation reports.
• Drive implementation of cybersecurity controls across infotainment hardware, software, and interfaces.
• Perform cybersecurity validation, vulnerability assessment, and incident handling.
• Support UN R155/156 (AIS 189/190) compliance activities, prepare, review, and maintain documentation and cybersecurity work products for internal reviews and regulatory audits.
• Act as primary cybersecurity interface for Tier‑1 suppliers, business partners, internal stakeholders, and compliance teams.

Technical Competencies

Essential:

• Knowledge of UN-R155/156, AIS189/190 regulations and ISO/SAE 21434, ISO 24089 standards.
• Familiarity with TARA i.e. identification of cyber security assets, threat vectors, attack paths, risk assessment etc.
• Familiarity with security concepts such as secure diagnostics, secure boot, cryptography fundamentals, PKI, certificate-based authentication, secure SW development, application sandboxing, SE Linux, secure debug controls, secure updates, intrusion detection etc.
• Understanding of vehicle E/E architecture, ECU interactions, and infotainment connectivity.
• Understanding of network interfaces and protocols such as CAN, UDS, USB, Bluetooth, WiFi, TCP/IP and corresponding security considerations.
• Hands-on experience in automotive development process and understanding of IVI system's features and functions.

Desirable:

• Knowledge of IVI system architecture, hardware, and software fundamentals.
• Familiarity with Linux/Android OS architecture concepts, core services, and application‑level interactions.
• Understanding of cloud/web-based application fundamentals, system design, and security considerations.
• Hands on experience in cybersecurity validation of Automotive ECUs or Embedded Systems.

Behavioral Expectations

• Strong ownership, accountability and execution focus.
• Structured documentation and clear communication skills.
• Collaborative approach and ability to handle multiple deliverables concurrently.
• Continuous learning mindset with awareness of evolving technologies and standards.

Tools:

• Exposure to network and ECU analysis tools (Wireshark, nmap, ADB, CANoe etc.)
• Familiarity with requirements and defect tracking tools (e.g. Jira)