Master Thesis: Supply Chain Cybersecurity Assurance

Location: Göteborg, SE, 417 15

Master Thesis: Supply Chain Cybersecurity Assurance

Location

Göteborg, SE, 417 15

#job-location.job-location-inline {

display: inline;

}

Position Type

Student

Permanent/Temporary

Temporary

Transport is at the core of modern society. Imagine using your expertise to shape sustainable transport and infrastructure solutions for the future. If you seek to make a difference on a global scale, working with next-gen technologies and the sharpest collaborative teams, then we could be a perfect match.

Background

Modern vehicles rely on complex software and hardware ecosystems developed across a global supply chain. As vehicles become increasingly connected and software-driven, cybersecurity risks can originate from any supplier tier, making transparency and security assurance more important than ever.

At the same time, regulations such as UNECE R155/R156, ISO/SAE 21434, and the EU Cyber Resilience Act place increasing responsibility on vehicle manufacturers to demonstrate cybersecurity across their entire supply chain.

Thesis Objective

The objective of this thesis is to explore how an automotive OEM can establish and verify cybersecurity assurance across a multi-tier supplier ecosystem.

The work will investigate how visibility, traceability, and evidence-based assurance can be improved for software, hardware, and third-party components throughout the supply chain.

A key focus area will be the design and evaluation of an End-to-End Supply Chain Cybersecurity Assurance Framework that enables:

Improved supply chain transparency

Traceability of software and hardware components

Alignment with automotive cybersecurity regulations and standards

Evidence-based cybersecurity assurance across supplier tiers

The thesis may also explore the potential use of AI and Large Language Models (LLMs) to support analysis and reasoning of supply chain cybersecurity data.

Research Areas

The thesis sits at the intersection of automotive cybersecurity, software supply chain security, and regulatory compliance. Depending on the student's interests and background, the research may cover topics such as:

Automotive cybersecurity and cyber risk management

Software and hardware supply chain security

Software Bill of Materials (SBOM), Hardware Bill of Materials (HBOM), and Cryptographic Bill of Materials (CBOM)

Cybersecurity assurance and verification methodologies

Cybersecurity regulations and standards (e.g., ISO/SAE 21434, UNECE R155/R156, EU Cyber Resilience Act)

Secure software development and vulnerability management

Traceability and transparency across multi-tier supplier ecosystems

Threat analysis, risk assessment, and compliance mapping

Artificial Intelligence (AI) and Large Language Models (LLMs) for cybersecurity analysis and decision support

Desired Profile

We are looking for a motivated Master's student with a strong interest in cybersecurity and emerging technologies. You are curious, analytical, and enjoy tackling complex challenges that span both technical and organizational domains.

A background in one or more of the following areas is desirable:

Cybersecurity or information security

Computer science, software engineering, or systems engineering

Embedded systems development

Automotive systems and connected vehicles

Software architecture and system design

Risk management and regulatory compliance

Experience or coursework in any of the following is considered an advantage:

Secure software development practices

Software supply chain security

Threat modeling, risk assessments, or vulnerability management

Cloud, connected, or distributed systems

AI/ML or Large Language Models (LLMs)

Open-source software ecosystems and software dependency management

You do not need to be an expert in all areas. We are primarily looking for a student who is passionate about cybersecurity, eager to learn, and interested in shaping future approaches to securing complex automotive supply chains.

Expected Outcome

The thesis is expected to propose and/or develop a scalable framework that helps establish cybersecurity assurance across the automotive supply chain while supporting compliance with industry regulations and standards.

Thesis Information

Scope: 1 student Start: Spring 2027

Location: Volvo Group, Gothenburg Supervisors: Alexander Åström & Aleksandar Dojchinovski

Last Application Date: November 13, 2026

Ready to contribute to the future of automotive cybersecurity? We welcome your application.

We value your data privacy and therefore do not accept applications via mail.

Who we are and what we believe in

We are committed to shaping the future landscape of efficient, safe, and sustainable transport solutions. Fulfilling our mission creates countless career opportunities for talents across the group’s leading brands and entities.

Applying to this job offers you the opportunity to join Volvo Group. Every day, you will be working with some of the sharpest and most creative brains in our field to be able to leave our society in better shape for the next generation. ​We are passionate about what we do, and we thrive on teamwork. ​We are almost 100,000 people united around the world by a culture of care, inclusiveness, and empowerment.

Trucks Technology & Industrial Division hire team players who are ready to create real customer impact. Our decentralized teams work close to our customers, with speed and autonomy, to build what they truly need.

Join us to collaborate on innovative, sustainable technologies that redefine how we design, build, and deliver value. Bring your curiosity, your expertise, and your collaborative energy, and together, we’ll turn bold ideas into tangible solutions for our customers and contribute to a more sustainable tomorrow.

Job Category

Technology Engineering

Organization

Trucks Technology & Industrial

Travel Required

No Travel Required

Requisition ID

36647