Product Security IR Analyst, Cyber Security Programs

Group Summary:

The IR Analyst, Product Cybersecurity role is a part of Magna's central Information Security Risk & Compliance (ISRC) team. This position will serve as a primary point of contact in matters related to product cybersecurity vulnerability monitoring, management, and reporting.

The Product Security IR Analyst will be the primary team member from the ISRC to utilize our global threat intelligence & vulnerability management tool. This role will work closely with leads from each of our unique business units to coordinate continual cybersecurity activities related to our products.

Your Responsibilities

• Identify potential vulnerabilities in Magna's products by utilizing Magna’s cyber threat intelligence and vulnerability management tool.

• Analyze and verify identified vulnerabilities to determine their applicability and relevance to Magna's products.

• Assess the risk level of verified vulnerabilities based on known industry frameworks.

• Collaborate with the product engineering team to facilitate the remediation of vulnerabilities.

• Track and report status of reported vulnerabilities

• Create playbooks and best practices for product cybersecurity incident response

• Stay current with industry best practices and emerging trends in product security to continuously improve Magna's vulnerability management process.

Who we are looking for

• Bachelor's degree or equivalent experience in a related technical field

• 4+ years of relevant experience in cybersecurity vulnerability monitoring, management, and/or incident response (automotive product preferred)

• Strong knowledge of product cybersecurity and vulnerability management principles.

• Proficiency in learning and adapting to new, advanced software tools

• Expert knowledge of industry standards related to product cybersecurity & incident response (ISO/SAE 21434 preferred)

• Excellent written and verbal English communication skills

• Comfortable conveying information effectively and professionally to a wide variety of technical and non-technical audiences

• Ability to work collaboratively with diverse teams.

• Enthusiasm for the evolving field of cybersecurity and a desire to continuously learn and improve

• Attention to detail and ability to prioritize tasks effectively.

Awareness, Unity, Empowerment: