Cybersecurity & Compliance Manager

About the role

Sodecia seeks a Cybersecurity & Compliance Manager to lead and strengthen its global cybersecurity function across IT and Operational Technology environments. You will define strategy, ensure compliance, and protect the multinational automotive group's operations.

Key responsibilities

• Define and deploy a global cybersecurity roadmap aligned with business and automotive industry requirements.
• Establish governance frameworks, policies, standards, and controls for all sites, including manufacturing plants and engineering centers.
• Lead risk assessments, vulnerability management, and mitigation plans for IT and OT environments.
• Manage internal and external audits, certifications (TISAX, ISO/IEC 27001, NIST, IEC 62443, GDPR) and supplier security risks.
• Oversee security tools such as SIEM, EDR/XDR, firewalls, IDS/IPS, MFA and ensure secure integration of OT systems (SCADA, MES, ICS).
• Coordinate penetration testing, incident response, crisis management, and disaster recovery planning.
• Act as the cybersecurity focal point for OEM customers, supporting audits and questionnaires.
• Develop global awareness and training programs, including phishing simulations.

Required profile

• Bachelor’s or Master’s degree in Cybersecurity, IT, Computer Science, Engineering or related field.
• 7‑10+ years of cybersecurity experience, with 3‑5+ years in leadership roles, preferably in automotive or industrial settings.
• Proven track record in multinational, multi‑site environments and in achieving certifications such as TISAX and ISO 27001.

Required skills

• Cybersecurity governance and risk assessment.
• Compliance frameworks: TISAX, ISO/IEC 27001, NIST, IEC 62443, GDPR.
• Security operations tools: SIEM, EDR/XDR, firewalls, IDS/IPS, MFA.
• OT security: SCADA, MES, ICS integration.
• Vulnerability management, patching, system hardening.
• Penetration testing coordination.
• Incident response and disaster recovery planning.
• Security awareness program development.