![[HiWi] Supporting Cybersecurity Compliance Research in German SMEs](https://images.spr.so/cdn-cgi/imagedelivery/j42No7y-dcokJuNgXeA0ig/ce760182-b481-4df6-af32-475934ca35c2/gradients_10/w=1920,quality=90,fit=scale-down)
- What: We are looking for a student research assistant (HiWi) to support the funded research project CRA-COMPASS, a collaboration between the TUM Chair for Strategy and Organization and Fraunhofer AISEC. Your main tasks will include coordinating and conducting qualitative interviews with SMEs, documenting findings, and supporting data analysis.
- Scope: Part-time, flexible hours (12-20h/week, up to 8 months)
- When: Start asap. Applications are open!
- How to apply: Send your CV, transcript of records, and a short motivation statement (details below).
Please note: There is a German language requirement for this position, as you need to be able to conduct interviews with SMEs in German.
💡 Background
The EU Cyber Resilience Act (CRA) obliges manufacturers of products with digital elements to meet stringent cybersecurity requirements along the entire product lifecycle — with full compliance required by December 2027. For SMEs, this represents a particular challenge: studies show that only 12.3% of SMEs are even aware of the CRA, compared to 83.5% of large enterprises. Many lack the internal expertise, financial resources, and established processes needed to prepare for compliance.
The CRA-COMPASS research project, jointly conducted by the TUM Chair for Strategy and Organization (CSO) and the Fraunhofer Institute for Applied and Integrated Security (AISEC), aims to support German SMEs systematically in implementing CRA requirements. The project develops both formal compliance process guidelines and an AI-powered, open-source CRA compliance tool.
As a HiWi, you will be an active part of the research team. Your work will directly feed into the empirical foundation of the project — helping us understand how SMEs currently handle CRA-related compliance in their product development processes.
🦾 Who We Are
As Chair for Strategy and Organization we are focused on research with impact. This means we do not want to repeat old ideas and base our research solely on the research people did 10 years ago. Instead, we currently research topics that will shape the future such as Quantum/Deep Tech, (Generative) Artificial Intelligence, Digital Transformation and Business Model Innovation, Diversity, Education Technology and Performance Management, Leadership, and Teams. We are always early in noticing trends, technologies, strategies, and organisations that shape the future, which has its ups and downs.
You will work closely with Marie Klotz and Joe Yu, both PhD Students at the Chair of Strategy and Organisation, as well as the broader CRA-COMPASS project team.
🎯 Your tasks
Your tasks:
- Interview coordination: Reach out to and schedule interviews with SME representatives (cybersecurity officers, product developers, IT staff)
- Interview support: Conduct and document semi-structured qualitative interviews with SME employees (in German)
- Documentation: Transcribe, structure, and prepare interview materials for analysis
- Data analysis: Support qualitative analysis of interview data, including coding and synthesis of key findings
- General project support: Assist with research-related tasks such as literature research, preparation of project reports, and internal documentation
🎓 Profile
- Native or fluent German speaker (you will have to conduct interviews in German)
- Completed Bachelor's degree (in management, information systems, or a related field)
- Interest in cybersecurity, regulatory compliance, and/or digital transformation
- Willingness to engage with qualitative research methods (semi-structured interviews, content analysis)
- Reliable, structured, self-driven working style and ability to work independently
📝 How to Apply
If you are interested, please send a mail to Joe Yu (joe.yue@tum.de) & Marie Klotz (marie.klotz@tum.de) with the subject line "CRA Compass HiWi | Application [Your Name]" together with:
- Your CV
- Current transcript of records / grade report
- Preferred starting date
- A short motivation statement (why this topic, what relevant background do you bring)