Security Monitoring Team (SMT) – Incident Response & Vulnerability Monitoring

As SMT Point of Contact, you will be working within the Hella Romania Cybersecurity Governance, where you will be responsible for cybersecurity monitoring, vulnerability management, and incident response activities for automotive products. You will be responsible for ensuring the correct application of Forvia HELLA’s Cybersecurity Monitoring, Vulnerability Management, and Incident Response processes, in alignment with ISO/SAE 21434, UNECE R155, customer agreements, and internal CSMS and governance requirements. You will coordinate continuous monitoring of cybersecurity information sources, including vulnerability databases, security advisories, customer notifications, supplier information, and internal and external reports, ensuring relevance assessment and traceability. You will be overall responsible for the evaluation, classification, coordination, and tracking of cybersecurity vulnerabilities and incidents, ensuring timely escalation, communication, and resolution according to agreed response times and contracts. You will coordinate the creation, maintenance, and review of monitoring, vulnerability, and incident response work products, covering development, production, and post‑production phases, and ensuring consistency with organizational cybersecurity and quality processes. You will act as an interface between Product Cybersecurity Managers, development and production teams, quality functions, customers, and external stakeholders for cybersecurity vulnerabilities and incidents. You will support cybersecurity incident response activities, including impact assessment, coordination of corrective actions, follow‑up actions, and communication with relevant internal and external stakeholders. You will support and contribute to organizational cybersecurity maturity and continuous improvement activities, including gap identification, lessons learned, and alignment of monitoring and incident response processes with evolving regulatory and customer requirements. You will support internal and external audits and assessments, including customer, certification, or regulatory audits, where cybersecurity monitoring, field issues, or incident response activities are within scope.