Master Thesis: Supply Chain Cybersecurity Assurance

Transport is at the core of modern society. Imagine using your expertise to shape sustainable transport and infrastructure solutions for the future. If you seek to make a difference on a global scale, working with next-gen technologies and the sharpest collaborative teams, then we could be a perfect match. 

Background

Modern vehicles rely on complex software and hardware ecosystems developed across a global supply chain. As vehicles become increasingly connected and software-driven, cybersecurity risks can originate from any supplier tier, making transparency and security assurance more important than ever.

At the same time, regulations such as UNECE R155/R156, ISO/SAE 21434, and the EU Cyber Resilience Act place increasing responsibility on vehicle manufacturers to demonstrate cybersecurity across their entire supply chain.

Thesis Objective

The objective of this thesis is to explore how an automotive OEM can establish and verify cybersecurity assurance across a multi-tier supplier ecosystem.

The work will investigate how visibility, traceability, and evidence-based assurance can be improved for software, hardware, and third-party components throughout the supply chain.

A key focus area will be the design and evaluation of an End-to-End Supply Chain Cybersecurity Assurance Framework that enables:

• Improved supply chain transparency
• Traceability of software and hardware components
• Alignment with automotive cybersecurity regulations and standards
• Evidence-based cybersecurity assurance across supplier tiers

The thesis may also explore the potential use of AI and Large Language Models (LLMs) to support analysis and reasoning of supply chain cybersecurity data.

Research Areas

The thesis sits at the intersection of automotive cybersecurity, software supply chain security, and regulatory compliance. Depending on the student's interests and background, the research may cover topics such as:

• Automotive cybersecurity and cyber risk management
• Software and hardware supply chain security
• Software Bill of Materials (SBOM), Hardware Bill of Materials (HBOM), and Cryptographic Bill of Materials (CBOM)
• Cybersecurity assurance and verification methodologies
• Cybersecurity regulations and standards (e.g., ISO/SAE 21434, UNECE R155/R156, EU Cyber Resilience Act)
• Secure software development and vulnerability management
• Traceability and transparency across multi-tier supplier ecosystems
• Threat analysis, risk assessment, and compliance mapping
• Artificial Intelligence (AI) and Large Language Models (LLMs) for cybersecurity analysis and decision support

Desired Profile

We are looking for a motivated Master's student with a strong interest in cybersecurity and emerging technologies. You are curious, analytical, and enjoy tackling complex challenges that span both technical and organizational domains.

A background in one or more of the following areas is desirable:

• Cybersecurity or information security
• Computer science, software engineering, or systems engineering
• Embedded systems development
• Automotive systems and connected vehicles
• Software architecture and system design
• Risk management and regulatory compliance

Experience or coursework in any of the following is considered an advantage:

• Secure software development practices
• Software supply chain security
• Threat modeling, risk assessments, or vulnerability management
• Cloud, connected, or distributed systems
• AI/ML or Large Language Models (LLMs)
• Open-source software ecosystems and software dependency management

You do not need to be an expert in all areas. We are primarily looking for a student who is passionate about cybersecurity, eager to learn, and interested in shaping future approaches to securing complex automotive supply chains.

Expected Outcome

The thesis is expected to propose and/or develop a scalable framework that helps establish cybersecurity assurance across the automotive supply chain while supporting compliance with industry regulations and standards.

Thesis Information
Scope: 1 student
Start: Spring 2027Location: Volvo Group, Gothenburg
Supervisors: Alexander Åström & Aleksandar Dojchinovski

Last Application Date: November 13, 2026

Ready to contribute to the future of automotive cybersecurity? We welcome your application.

We value your data privacy and therefore do not accept applications via mail. 

Who we are and what we believe in 
We are committed to shaping the future landscape of efficient, safe, and sustainable transport solutions. Fulfilling our mission creates countless career opportunities for talents across the group’s leading brands and entities.

Applying to this job offers you the opportunity to join Volvo Group. Every day, you will be working with some of the sharpest and most creative brains in our field to be able to leave our society in better shape for the next generation. ​We are passionate about what we do, and we thrive on teamwork. ​We are almost 100,000 people united around the world by a culture of care, inclusiveness, and empowerment. 

Trucks Technology & Industrial Division hire team players who are ready to create real customer impact. Our decentralized teams work close to our customers, with speed and autonomy, to build what they truly need. 
Join us to collaborate on innovative, sustainable technologies that redefine how we design, build, and deliver value. Bring your curiosity, your expertise, and your collaborative energy, and together, we’ll turn bold ideas into tangible solutions for our customers and contribute to a more sustainable tomorrow.