Sr. Specialist Cybersecurity

Job description

Job descriptions may display in multiple languages based on your language selection. What we offer: At Magna, you can expect an engaging and dynamic environment where you can help to develop industry-leading automotive technologies. We invest in our employees, providing them with the support and resources they need to succeed. As a member of our global team, you can expect exciting, varied responsibilities as well as a wide range of development prospects. Because we believe that your career path should be as unique as you are. Group Summary: Transforming mobility. Making automotive technology that is smarter, cleaner, safer and lighter. That’s what we’re passionate about at Magna Powertrain, and we do it by creating world-class powertrain systems. We are a premier supplier for the global automotive industry with full capabilities in design, development, testing and manufacturing of complex powertrain systems. Our name stands for quality, environmental consciousness, and safety. Innovation is what drives us and we drive innovation. Dream big and create the future of mobility at Magna Powertrain. Job Responsibilities: POSITION SUMMARY: At Magna Powertrain, Cybers ecurity is of the highest priority. The protection of our data, both internal and external, from threats is paramount to our success . The Sr. Specialist - Group Cybersecurity provides leadership, operational enforcement and monitoring of all Cybers ecurity policies at the G roup level, liaising closely with Corporate Information Security , IT and other related Functions . Magna Powertrain Global Cybersecurity covers 3 security domains related to I nformation T echnology (IT) , O perational T echnology (OT) , and P roduct Cybersecurity. The role of the Sr. Specialist - Group Cybersecurity is to ensure that all Cybers ecurity requirements and protocols are effectively implemented a cross all locations. ESSENTIAL DUTIES & RESPONSIBILITIES: Serve as Cybers ecurity leader in Magna Powertrain (MPT) for monitoring key security and compliance performance indicators (KPIs), analyze results, and drive corrective actions to address gaps and enhance organizational security posture. Provide guidance and expert advice to different business units in areas IT and OT as it relates to security operations and processes. Provide support for remediation of IT audit findings, collaborating with stakeholders to address identified gaps, monitor corrective actions, and ensure timely closure of audit issues. Assess risks for assets and services , and outline mitigation options and timelines. Conduct AI risk assessments to identify, evaluate, and mitigate potential threats associated with artificial intelligence systems and technologies, ensuring compliance with organizational standards Perform group risk monitoring activities , and assist divisions , in maintaining th e respective divisional risk registers, ensuring accurate documentation and timely updates of identified risks. Coordinate OT security efforts by applying controls to safeguard critical assets, and advise on creating, updating, testing, and training disaster recovery and business continuity plans Support and continuously improve the Information Security Management System (ISMS) to ensure effective protection of organizational assets and compliance with relevant standards. Design and consolidate standardized security processes and associated procedures to be implemented across MPT Divisions Creat e awareness campaigns in partnership with Corporate Information Security and providing training The above is intended to describe the general content of and the requirements for the performance of this position . It is not to be construed as an exhaustive statement of duties, responsibilities, or requirements. QUALIFICATIONS: Bachelors of Science degree in Computer Science, Computer Security, Information Systems, or equivalent proof of baseline knowledge. Strong k nowledge of various frameworks/regulations such as ISO 27001 /2 , TISAX , NIST 800-53, NIST Cybersecurity Framework, GDPR, SOX, ITIL, COBIT, COSO or similar. 8 + years of IT and security experience. Accredited certifications a plus, such as: CISA, CISSP, OSCP, CEH (Certified Ethical Hacker) Previous SOC / NOC experience a plus KEY BEHAVIORAL TRAITS FOR SUCCESS: Well - organized and structured; Able to demonstrate strong communication skills and consistently shares knowledge with colleagues, including maintaining clear and thorough documentation; exhibits self-drive and self-motivation by proactively taking initiative, setting high standards for personal achievement, and continuously seeking opportunities to enhance performance and contribute to team success. Technical/Functional Expertise: Able to demonstrate mastery of the technical/functional skills necessary for performing own job; maintain state-of-the-art knowledge of the advances in field; regularly publish or present on leading-edge issues; conduct leading-edge research or similar work that has organization-wide impact; play a key role in advancements in profession. Flexibility & Achieving Change : Able to positively deal with changes that affect job requirements; adapt to shifting priorities in response to the needs of internal and external customers; quickly recognize situations/conditions where change is needed; work to clarify situations where information, instructions, or objectives are ambiguous; support organizational change. Problem Solving & Analysis : Able to gather appropriate data and diagnose the cause of a problem before taking action; separate causes from symptoms; apply lessons learned from others who encountered similar problems or challenges; anticipate problems and develop contingency plans to deal with them; develop and evaluate alternative courses of action. Creativity & Innovation: Able to generate creative ideas to solve problems and improve work methods; apply novel approaches to situations; independently apply professional expertise in ways that are unique or innovative; collaborate with team members to brainstorm creative approaches; rethink situations to create new opportunities or overcome obstacles. Work Environment: - Office Environment Magna Standards: Follow Magna’s Code of Conduct and Ethics and related compliance policies. Supports and adheres to policies, procedures, and operational guidelines related to established quality management system (IATF 16949). Practice and maintain integrity while following Magna’s Charter and Constitution. Drive the development of new technologies to improve quality, efficiency and reduce cost. Comply with safety policies and procedures to ensure duties of self are performed in a safe manner. Health & Safety responsibilities: Understand applicable Environmental, Health & Safety policies and procedures in the workplace. Report unsafe conditions immediately. Report injuries, accidents, illnesses, near misses, property damage immediately. Follow safety rules. Comply with requirements for the use or operation of machines or equipment. Comply with Personal Protective Equipment (PPE) requirements. Create a positive work environment by demonstrating and sharing functional/technical knowledge. Develop and maintain a responsive and cooperative working relationship with internal and external customers. Treat everyone with dignity, trust and respect. Complete additional duties and responsibilities as assigned. Comply with Magna’s information and data protection policies. The above is intended to describe the general content of and the requirements for the performance of this position. It is not to be construed as an exhaustive statement of duties, responsibilities, or requirements. This job description reflects the core elements of a position. There may be additional requirements based on local laws and regulations which could be attached as an addendum. Awareness, Unity, Empowerment: At Magna, we believe that a diverse workforce is critical to our success. That’s why we are proud to be an equal opportunity employer. We hire on the basis of experience and qualifications, and in consideration of job requirements, regardless of, in particular, color, ancestry, religion, gender, origin, sexual orientation, age, citizenship, marital status, disability or gender identity. Magna takes the privacy of your personal information seriously. We discourage you from sending applications via email or traditional mail to comply with GDPR requirements and your local Data Privacy Law. AI-Assisted Screening Disclosure As part of our commitment to a fair, consistent, and efficient recruitment process, we may use artificial intelligence (AI) tools to assist in the initial screening of applications submitted through our Workday system. These tools help identify qualifications and experience that align with the role requirements. Please note that AI is used solely to support our recruiters. Final decisions are always made by the hiring manager and the hiring team. Importantly, no applicant data is shared externally through these AI tools. All information remains securely within our systems and is handled in accordance with our privacy and data protection policies. Under conditions defined by applicable law, you may have the right to request an explanation of how AI is used to support decision-making. If you have any questions or concerns about this process, feel free to contact our Talent Attraction team. Worker Type: Regular / Permanent Group: Magna Powertrain