Technical Project Manager

Job description

The Lead Product Cybersecurity Assurance Engineer serves as the cybersecurity focal point within the project team supporting the complete cybersecurity lifecycle from creating Product Cybersecurity Plan, Threat & Risk Assessment (TRA) through mitigation definition, creating Product Cybersecurity Action List with implementation support, cybersecurity verification planning, security test case development, verification execution, and compliance evidence generation for battery-electric mining equipment and supporting systems. The role translates cybersecurity risks and specialist guidance into practical requirements, coordinates security activities with engineering, and tracks issues through implementation and verification. Working with an external Cyber Resilience Act (CRA) consultant and product compliance colleagues, the specialist helps the team develop and maintain secure products that support safe, productive, lower-emission mining. This role focuses on product cybersecurity for embedded and industrial products and is not an enterprise IT security role. Key Responsibilities Lead and coordinate product cybersecurity activities throughout the project lifecycle, aligning deliverables, contributors, milestones, and release objectives with the project lead. Translate guidance from CRA consultants and product compliance teams into cybersecurity requirements, engineering actions, verification activities, and compliance evidence. Collaborate with systems, software, firmware, and hardware teams to identify threats, assess cybersecurity risks, define mitigations, and evaluate security implications across product architectures, interfaces, communications, remote access, software dependencies, and operational environments. Participate in architecture and design reviews to ensure cybersecurity measures are practical, effective, and balanced with safety, availability, performance, maintainability, and serviceability requirements. Maintain end-to-end traceability between cybersecurity risks, requirements, mitigations, implementation actions, verification activities, and results. Coordinate cybersecurity verification and validation activities, including review of findings, root-cause analysis, remediation support, retesting, and closure of cybersecurity issues. Review supplier cybersecurity information and software component inventories, resolving gaps that may impact cybersecurity compliance or product risk. Assess the cybersecurity impact of design changes, newly identified vulnerabilities, and field findings, and support remediation planning, secure update strategies, and vulnerability management processes. Maintain cybersecurity records, verification evidence, and compliance documentation required for product releases, audits, and CRA compliance reviews. Communicate cybersecurity status, risks, findings, and required decisions to project stakeholders, while promoting the adoption of secure engineering practices across the project team. While cybersecurity assurance, verification, and compliance remain the primary focus, contribute to software or firmware implementation and remediation activities when cybersecurity testing, assessments, or compliance findings require product changes. Skill Requirements Key Requirements Must-Have Skills Product Cybersecurity Engineering Threat & Risk Assessments (TRA) Cybersecurity Verification & Validation Security Test Planning and Execution Embedded / Industrial Product Security Vulnerability Management Software/Firmware Development Experience Requirements Traceability and Compliance Preferred EU CRA, IEC 62443 Embedded Linux, Microcontrollers Threat Modeling, Penetration Testing, SBOM Industrial Equipment, Battery Systems, or Charging Solutions domain experience Experience range : 10-12 years Given the nature of the role, candidates with strong hands-on experience in embedded product cybersecurity, TRA, cybersecurity V&V, and software/firmware environments will be preferred Other Requirements Cybersecurity Verification & Validation Lead and support cybersecurity verification and validation activities throughout the product lifecycle to ensure cybersecurity risks, requirements, and mitigations are effectively implemented, verified, and documented. Key Responsibilities Develop cybersecurity verification strategies, plans, acceptance criteria, and required compliance evidence. Create cybersecurity test cases and procedures based on threat and risk assessments, security requirements, mitigation measures, and regulatory obligations. Define and execute security-focused test scenarios, including misuse, abuse, and attack-based testing. Execute or coordinate cybersecurity verification and validation activities and document test results and findings. Support defect investigation, remediation verification, retesting, and closure of cybersecurity-related issues. Contribute to implementation and remediation activities, including hands-on software or firmware modifications where required to resolve cybersecurity findings. Maintain traceability between cybersecurity risks, requirements, mitigations, test cases, and verification results. Produce cybersecurity verification reports and compliance evidence supporting product releases, audits, and regulatory requirements. Apply now Information at a Glance Why HCLTech? At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first. HCLTech is a global technology company, home to more than 230,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending September 2026 totaled $14.8 billion. Disclaimer Privacy Statement Terms of use Sitemap Raise a Grievance We use cookies on our site. Please read more about cookies policy here. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Copyright © 2026 HCL Technologies Limited Cookie Consent Manager When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. Required Cookies These cookies are required to use this website and can't be turned off. Required Cookies Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function: "route" is used for session stickiness "careerSiteCompanyId" is used to send the request to the correct data center "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another Cookies from provider SAPasserviceprovider are required and cannot be turned off Functional Cookies These cookies provide a better customer experience on this site, such as by remembering your login details, optimizing video performance, or providing us with information about how our site is used. You may freely choose to accept or decline these cookies at any time. Note that certain functionalities that these third-parties make available may be impacted if you do not accept these cookies. Consent to all Functional Cookies Functional Cookies Provider Description Enabled Vimeo Vimeo is a video hosting, sharing, and services platform focused on th