Senior Cybersecurity Certification Consultant

Schneider Digital (SD) is the global IT organization within Schneider Electric. The Digital Assets Certification Framework is a SCHNEIDER DIGITAL initiative to ensure the organization is delivering best in class applications that are sustainable, compliant, and secure. This role reports to China Architect Leader and will be working in collaboration with Project Managers and project delivery teams, as well as with Global Cyber Certification Leader and the Global Security team to embed cybersecurity and privacy controls into all the digital assets assigned This includes the following: Handle cybersecurity and privacy (certification) engagements end to end for SE’s digital assets (Software Applications, Technology Platforms, Schneider Electric Digital Offers, APIs) in the relevant region or assigned business domain. Cybersecurity and privacy engagements involve assisting project and product delivery teams in identifying IT security and data protection requirements and embedding the required controls into the digital asset. Prior to release or deployment of the product confirm if it is compliant with security requirements, or that sufficient compensating controls have been put in place to mitigate identified risks and thus achieve compliance. The engagements involve application security and privacy advisory services to products and software which are either developed in house or procured through third party vendors. Perform cloud security assessments for Third Party SaaS vendors through the CSA framework Conduct risk assessments and communicate the outcomes to IT and Business application owners. Understanding the general IT security policies of the company. Conduct awareness sessions and webinars for stakeholders in the respective geographies on cybersecurity and privacy requirements. Work closely with project delivery teams, perform everyday communications with project managers and technical specialists, introduce the certification engagements and ensure that the compliance is achieved before applications are put into production 资格 Education and Training Information Technology, Information Security and Risk Management degrees Skills / Behaviors Project Management Advance Knowledge of Cybersecurity and Privacy Principles Leadership / Act like owners Collaboration/Teamwork Communications (Written and Oral) Requirements Gathering and Analysis Interpersonal Skills, proactiveness Willing to learn new skills / Learn Everyday Knowledge The candidate should have in-depth knowledge and experience of the following: Expertise in applying Information Security Management principles and standards in areas such as threats and vulnerabilities, risk assessment and mitigation, security policy and security management process Expertise in ensuring compliance with personal data protection legislation in EU and relevant regions. Understanding or experience on any of the following is an advantage: Cloud Security Assessment and Security Audits of Cloud Environment Vulnerability Management (Process, Tools and Metrics) NIST Cybersecurity Framework Critical Security Controls (CSC) Expertise in DevSecOps methodologies is also an advantage. Experience and Professional Certification 5+ years experience in general IT management, security, and data protection. Some of the desired certifications (if not achieved, the role holder could aspire to achieve these as part of their development plans in this role) CISSP (Certified Information Systems Security Professional) CIPP (Certified Information Privacy Professional) (good to have) CISM (Certified Information Security Manager) CCSP (Certified Cloud Security Professional) OSCP, CEH (Desirable) Any other product specific security certification (e.g. Microsoft or AWS) 时间表: 全职 请求编号: 0082SX