FGL - Cybersecurity

Group Company: Tvs Motor

Office Location: Hosur

About TVS / Who are we? TVS Motor Company is a reputed two and three-wheeler manufacturer globally, championing progress through Sustainable Mobility with four state-of-the-art manufacturing facilities in Hosur, Mysuru and Nalagarh in India and Karawang in Indonesia. Rooted in our 100-year legacy of Trust, Value, and Passion for Customers and Exactness, we take pride in making internationally aspirational products of the highest quality through innovative and sustainable processes. We are the only two-wheeler company to have received the prestigious Deming Prize. Our products lead in their respective categories in the J.D. Power IQS and APEAL surveys. We have been ranked No. 1 Company in /the J.D. Power Customer Service Satisfaction Survey for consecutive four years. Our group company Norton Motorcycles, based in the United Kingdom, is one of the most emotive motorcycle brands in the world. Our subsidiaries in the personal e-mobility space, Swiss E-Mobility Group (SEMG) and EGO Movement have a leading position in the e-bike market in Switzerland. TVS Motor Company endeavours to deliver the most superior customer experience across 80 countries in which we operate.

For more information, please visit www.tvsmotor.com.

Job Title / Role: Functional Group Leader - Cybersecurity

Purpose of the role

The Cyber Security Engineer is responsible for standardising and managing cybersecurity for EEE/EV/HEV components, subsystems and vehicle systems designed and developed for 2W/3W/4W vehicles under development at TVS Motor Company. Main responsibilities include:

• Perform Threat Analysis and Risk Assessments (TARA).
• Develop robust security concepts and solutions tailored to project/client needs, including adherence to industry standards and frameworks.
• Perform security audits and assessments, providing detailed reports and recommendations for improvement.
• Collaborate with cross-functional teams to ensure cybersecurity measures are integrated seamlessly into projects.
• Deliver cybersecurity work products across the vehicle lifecycle in accordance with a Cyber Security Management System (CSMS).
• Manage the delivery of cybersecurity work products in accordance with CSMS, including those agreed within supplier CIADs.
• Support the development of best-practice working procedures for cybersecurity activities.
• Stay updated with the latest cybersecurity trends, threats and technologies to continuously enhance service offerings.
• Ensure all cybersecurity artefacts are written, maintained/updated, released and traceable, managed in Codebeamer ALM, with process adherence and design reviews conducted as per Norton Single Point Lessons and/or relevant TVS/Norton guidelines.
• Organise and, where necessary, support or witness penetration testing either internally or through external test houses.
• Create a gateway template aligned with Norton/TVS PLM gateways.

Role Description

Key responsibilities in order of priority:

• Analyse specific cybersecurity requirements for safety in terms of ISO/SAE 21434, UNECE R155 and R156.
• Define necessary processes and working models with a clear responsibility chart throughout the process to achieve functional safety requirements, including item definition, asset list, attack path, damage scenario, threat scenario, cybersecurity goals and cybersecurity traceability report.
• Conduct and steer relevant activities required from the defined cybersecurity development process for each project.
• Create and standardise cybersecurity goals.
• Conduct and review TARA risk analysis.
• Report and present cybersecurity updates to stakeholders at all levels.
• Approve cybersecurity concepts.
• Manage the definition of penetration test requirements.
• Support system engineering to ensure ISO/SAE 21434-compliant system architecture in the early phase of projects.
• Prepare visualisation dashboards in Codebeamer to display metrics.
• Ensure correct process definition.
• Manage the introduction, review and supervision of design reviews.