Product Cybersecurity & Compliance Manager

Strattec (NASDAQ: STRT) is a global automotive access company that designs and delivers safe, secure, and highly engineered access solutions for the automotive and mobility industries.

Built on generations of access and security engineering expertise, Strattec partners closely with leading automotive OEMs to create differentiated, system-level access experiences for drivers and passengers around the world. Our innovative portfolio spans the entire vehicle access journey:

Permission: Secure vehicle entry through advanced mechanical and electronic access systems.
• Motion: Reliable, powered access solutions that enhance convenience and everyday usability.
• Hold: Precision-engineered latching systems that deliver strength, safety, durability, and performance trusted by global OEMs.

As vehicle access becomes increasingly intelligent, connected, and central to the overall driving experience, Strattec continues to expand its market presence, diversify its customer base, and grow its global reach. Our vision is to be the world's most trusted access solutions partner, delivering long-term value across the automotive and mobility markets.

Headquartered in Milwaukee, Wisconsin, Strattec operates facilities throughout the United States, including locations in Milwaukee, Wisconsin; Auburn Hills, Michigan; and El Paso, Texas. Internationally, we maintain manufacturing, engineering, and commercial operations in Ciudad Juarez, Chihuahua, and Leon, Guanajuato, Mexico, as well as engineering and commercial operations in South Korea.

Our global footprint combines world-class engineering expertise, advanced manufacturing capabilities, and responsive customer support to help shape the future of vehicle access and security.

Guided by our culture pillars of Think New, Do Together, and Own It, we empower associates to innovate, collaborate, and take ownership to make a meaningful impact every day.

Join Strattec and help engineer the access experience for the next generation of mobility.

POSITION OVERVIEW

We are seeking a highly skilled Product Cybersecurity & Compliance Manager to establish, harmonize, implement and oversee our product Cybersecurity (CSMS/SUMS) processes. The candidate will spearhead the implementation of our end-to-end cybersecurity lifecycle. In addition, you will oversee the continued evolution and rollout of secondary supporting frameworks, specifically ASPICE and Functional Safety (FuSa).

In this role, you will serve as the central technical authority and act as the "glue" connecting engineering, quality, manufacturing and global customers. While this position does not have direct reports, it requires robust technical leadership to guide cross-functional project teams and ensure world-class compliance. Crucially, you will have the authority to independently escalate critical concerns directly to executive leadership.

ESSENTIAL DUTIES AND RESPONSIBILITIES

Core Product Cybersecurity & Software Updates (Primary Focus)

• CSMS & SUMS Governance: Establish internal processes and lead overall corporate governance aligned with ISO 21434 and ISO 24089 standards.
• Security Work Products: Plan, support, and review critical engineering work products-including TARA (Threat Analysis and Risk Assessment), cybersecurity concepts, and verification evidence-directly alongside project teams.
• Security Operations: Manage core product security operations, including vulnerability management, incident response, and secure production software transfers.
• Ensuring implementation of adequate Product Security solutions & approved security measures

Secondary Compliance Frameworks & Integration

• Process Integration: Merge disparate engineering processes into a singular, unified framework that seamlessly supports CSMS, SUMS, FuSa, and ASPICE.
• Process Compliance (ASPICE): Oversee system and software development processes aligned with ASPICE standards. Enforce strict, bi-directional traceability from stakeholder requirements down to architecture and verification testing. Perform Software Quality Assurance (SQA) activities and lead gate reviews.
• Functional Safety (FuSa): Oversee key safety work products-including HARA, FMEA/SW FMEA, FTA, and safety concepts-ensuring all processes align with ISO 26262 standards.

Cross-Functional Leadership & Business Operations

• Cross-Functional Interface: Act as the central liaison bridging critical coordination between Engineering, Program Management, IT, Manufacturing, Quality, Purchasing, and Human Resources.
• External Stakeholder Management: Own the technical interface with global customers and suppliers. Manage Cybersecurity Interface Agreements (CIAs) and Development Interface Agreements (DIAs) to align scope, timelines, and deliverables.
• Audits & Metrics: Track and report KPIs regarding process maturity and compliance health. Conduct periodic internal audits to drive continuous improvement and coordinate external assessments to maintain global certifications.
• Business Development Support: Define customized process compliance models for new business awards based on specific customer requirements.
• Leadership & Escalation: Lead software project teams through technical guidance and exercise your independent internal leadership escalation authority to bring attention to and seek immediate support for critical issue resolution.

Education

• Bachelor of Science in an Engineering field required (Electrical/Electronics, or Computer Engineering strongly preferred).

Experience

• 5+ years of direct experience in CSMS process development and governance (ISO 21434).
• Preferred 3+ years of experience in ASPICE and Functional Safety (ISO 26262) process development and compliance.

Preferred Skills & Knowledge

• Regulations & Standards: Deep understanding of UN Regulations UN R155 and UN R156, alongside a working knowledge of ISO 21434, ISO 24089, ISO 26262, and ASPICE frameworks.
• Tools: Proficiency with Application Lifecycle Management (ALM) systems such as PTC Integrity or Codebeamer; expert proficiency with Microsoft Office tools.
• Testing & Architecture: Familiarity with modern security testing methods (including fuzz testing and penetration testing), CI/CD pipelines, and Agile workflows.

• TUV/ INTACS certified Assessor for Cybersecurity, FuSa, ASPICE

• Automotive Systems: Broad understanding of embedded software, electrical systems, vehicle communication protocols, controls, and secure design controls (e.g., secure flashing, secure communication, data management).
• Lifecycle Awareness: General understanding of hardware/mechanical design, manufacturing, quality assurance, and after-sales support.

LANGUAGE SKILLS

• Strong oral and written English language skills.
• Strong technical writing skills.
• Ability to effectively represent information and respond to questions in a meeting environment including with customers and executive leadership.