Nocheol Park

About Nocheol Park

A highly experienced embedded SW and Cybersecurity specialist to develop and manage major automotive product including Infotainment system, Telematics, V2X and RSI over 5 Global OEMs and multiple supplier. Proven track record of developing and design Secure Logging, Secure protocol, HSM and DRM with on time delivery. Strong insight of entire SW release cycle for both development and governance including ISO/SAE 21434, FMVSS, RED-DA, Incident response, CVEs management, TARA, CYS Validation and HW security beyond SW.

Experience

1. Cyber Management Systems Lead

   General Motors

   Jan 2026 — Present · Warren, MI, US

   Assess, status, and update cyber management system governance processes and practices to facilitate compliance with all internal and external requirements, including UN R155 and related automotive cybersecurity standards and regulations- Lead the development, implementation, and governance of vulnerability management practices for vehicle products, ensuring alignment with UN R155, ISO/SAE 21434, and industry best practices- Developed an AI-driven TARA (Threat Analysis and Risk Assessment) tool that continuously integrates real-time threat intelligence to maintain up-to-date risk profiles- Design and document high-level processes for vulnerability identification, assessment, prioritization, remediation, and reporting across product (vehicle), IT, and OT domains- Drive automation of vulnerability management processes, leveraging data analytics, dashboards, and workflow tools to increase efficiency, accuracy, and traceability- Collaborate closely with data management teams to ensure seamless integration of vulnerability data, reporting, and metrics into enterprise platforms and management systems- Ensure the organization’s vulnerability management processes meet or exceed UN R155 requirements for certification, including lifecycle risk management, monitoring, incident response, and supplier evidence- Coordinate with product engineering, IT, OT, and compliance teams to ensure vulnerabilities are managed effectively and in accordance with regulatory requirements- Monitor regulatory, industry, and threat landscape developments, proactively updating frameworks and processes to maintain compliance and best-in-class security posture- Support internal and external audits and drive continuous improvement initiatives for vulnerability management and cybersecurity governance- Provide subject matter expertise and training to cross-functional teams on management systems, UN R155, process automation, and vulnerability management processes.

Education

• GWNU

  Bachelor of Science (BS), Electronics Engineering, Embedded programing

  2005 — 2012

Skills

• Arm
• Git
• Debugging
• Embedded Linux
• Javascript
• Html 5
• Computer Language
• Xcode
• Device Drivers
• Eclipse
• Software Engineering
• Tortoise Svn
• 안드로이드
• Araxis Merge
• Android
• Embedded Software
• Rtos
• C++ Language
• Vim
• Assembly Language
• Firmware
• Objective-C
• Embedded Systems
• Java