Product Cybersecurity Manager - Onsite Urbandale IA

Product Cybersecurity Manager

Location: Onsite, Urbandale, IA

Contract: 24+ months

Shift: 1st Shift (8 AM – 5 PM)

Purpose: The Product Cybersecurity Program Manager will understand stakeholder security needs and manage activities related to weaknesses, vulnerabilities, and exploits in John Deere technologies. The role focuses on creating value by ensuring cyber resilience, supporting the security vision, strategy, and roadmap, and translating stakeholder needs into actionable objectives for security engineers.

• Penetration Testing Scope, assess, and communicate testing activities across products.
• Vulnerability Management:
  Drive implementation and coordination across multiple teams.
• Product Security Defense Center:
  Support security operations and risk management.

• Operate within Agile, Scrum, Kanban, or similar iterative development methodologies.
• Listen to stakeholders and teams to understand technical and business needs.
• Coordinate product roadmap and features across teams, managing dependencies.
• Partner with engineering to validate, build, and support solutions meeting quality, performance, and cost objectives.
• Support penetration testing and vulnerability management activities.
• Maintain traceability of security processes according to ISO 24882 and the Cyber Resilience Act (CRA).

• Undergraduate degree in Engineering, Computer Science, Cybersecurity, Systems Engineering, Business, or related field.
• 5+ years of experience building successful products in program management or systems roles.

• Excellent communication and interpersonal skills; ability to inspire and rally teams.
• Technical enough to engage directly with engineers; software coding not required.
• Knowledge of off-highway vehicles or harsh environment machinery.
• Understanding of engineering principles and embedded systems.
• Experience with embedded controller hardware/software design.
• Familiarity with embedded security (secure boot, HSM, cryptographic key lifecycle).
• Expertise in vulnerability assessment and penetration testing methodologies.
• Knowledge of compliance frameworks and regulatory requirements for connected machinery.

Recruiter: Lillian Grace, Cube Hub Inc.