Hungry for challenges? Join a group with innovation at its heart and contribute to the automotive revolution!
OPmobility is a world-leading provider of innovative solutions for a unique, safer and more sustainable mobility experience. Innovation-driven since its creation, the Group develops and produces intelligent exterior systems, customized complex modules, lighting systems, clean energy systems and electrification solutions for all mobility companies. With a €11.4 billion economic revenue in 2023, a global network of 152 plants and 40 R&D centers, OPmobility relies on its 40,300 employees to meet the challenges of transforming mobility.
Our ambition? Provide automakers with cutting-edge equipment and solutions to develop tomorrow’s clean and connected car.
As Information Security Risk Leader, you will be the point of contact for all risk analysis activities in projects, assessing the cyber maturity level of our partners and managing the associated security assurance plans.
You will be responsible for the following tasks and responsibilities:
Risk analysis:
Oversee risk analysis missions when they are carried out by an external partner
Carry out risk analyses in projects (ISP) using our tool, for which you will be the “tool & process owner”
Propose and implement the necessary enhancements to the existing tool (Excel spreadsheet)
Support Business Groups in adopting the tools and assist/train them in carrying out risk analyses in projects
Participate in maintaining the Group Cyber Risk Matrix risk mapping
Security Assurance Plan:
As the “owner,” oversee the “Security Assurance Plan” phases in projects and calls for tenders;
Propose and implement identified improvements to the various existing PAS documents;
Third-party risk management:
As part of the TPSM (Third-Party Security Management) process, oversee the validation phase for responses to Security Evaluation questionnaires provided by our partners
Propose and implement necessary improvements to the TPSM questionnaire
Other:
Contribute to drafting security policies in line with current requirements and the ISMS
Contribute to certain projects in the cyber roadmap approved for the Strat plan
For these all the activities, you will work with:
External
IT and cybersecurity solution publishers and integrators
Internal
Members of the Cybersecurity team
Project managers and IS and IT experts from Opmobility Group
Members of the Digital & IS Department from all Business Groups
Business stakeholders from OPmobility Business Groups
Required profile:
OPmobility is looking for someone who can perform all the above tasks.
You have a higher education degree (5 years of higher education) in IT, IT risk management, auditing, or equivalent.
You have significant experience in IT risk management for on-premises and cloud environments
You have proven experience in assessing the cyber maturity level of third parties (TPSM/TPRM)
You are proficient in ISO 27005, ISO 27001, EBIOS RM (or equivalent) standards and risk mapping tools
You are known for your rigor, analytical skills, listening skills, and communication skills
You are comfortable speaking and writing in English.
As a responsible company, OPmobility pays particular attention to diversity and equality within its teams and the Group commits to treat all job applications equally.
... Provide security leadership for client due diligence, RFPs, and enterprise customer engagements.- Monitor emerging cybersecurity threats and recommend proactive risk mitigation https://jobeax.com/link/nlDmgAZmTQBOFrjk We're Looking For:- 14 - 16 years of experience in Information Security, Cybersecurity, IT Risk, or Governance, ...
... to identify, evaluate, and mitigate technology and vendor risks across the organization. Must-Haves - Experience: 3 to 5 years of dedicated experience in IT risk management, cybersecurity, third-party risk management (TPRM), or information security governance. - IT Risk Knowledge: Strong understanding of internal IT general ...
... other partner teams. About the Ideal Candidate - Experience in application security, secure software development, vulnerability management, or related cybersecurity disciplines. - Knowledge of Secure Development Lifecycle (SDL) practices, application security testing methodologies, and security risk management principles. ...
... specialising in Penetration Testing, GRC Consulting and Managed Security. We work with organisations in more than 30 countries, helping them understand their security risks, strengthen their security posture and build practical, sustainable security programmes. The Opportunity We are looking for an Information Security Consultant ...
... accelerate a career in information security. You will join the Information Security and Compliance team and apply your engineering skills to practical cyber security work, including software security reviews, vulnerability management, penetration testing, risk assessments, automation, cloud configuration reviews and security ...
... intersection of strategy, engineering, and emerging risk? CommScope's cybersecurity team is looking for a Security Architect who is ready to shape the future of our security program. In this senior individual contributor role, you will serve as a technical authority on our Security Engineering team, driving the design of secure ...
... experience in Information Security, Cybersecurity, Risk Management, IT Audit, Compliance, Technology Governance, or a related field. - Bachelor's degree in Information Security , Cybersecurity, Computer Science, Information Systems, Risk Management, Business Administration, Law, or a related discipline. - Strong written ...
... experience in Information Security, Cybersecurity, Risk Management, IT Audit, Compliance, Technology Governance, or a related field. - Bachelor's degree in Information Security , Cybersecurity, Computer Science, Information Systems, Risk Management, Business Administration, Law, or a related discipline. - Strong written ...
... love to meet you. Role location: Pune - Hybrid (three days in-office, two days virtual) About the role As an Analyst II, Information Security, you’ll support information security management system (ISMS), privacy, risk management and compliance activities. You’ll lead audit engagements, assess information security risks and ...
... interest in developing AI-powered security workflows. - Security-related projects on GitHub, technical blogs, or other contributions demonstrating practical security expertise. Experience and Ideal Candidate Profile Experience: 2–6 years in Information Security, Cloud Security, Infrastructure Security, or a related domain. ...