Field Services Offer CyberSecurity Advisor

«out the job Schneider Electric™ creates connected technologies that reshape industries, transform cities and enrich lives. Our 144,000 employees thrive in more than 100 countries. From the simplest of switches to complex operational systems, our technology, software and services improve the way our customers manage and automate their operations. At Schneider Electric, our mission is to protect sustainable energy management for homes, buildings, data centers, infrastructure and industries, and we aim at making a difference every day with the best industrial cybersecurity team. Cybersecurity for Customer Projects and services needs to address major challenges such as the risks generated to our customers network and installations, and the compliance of our systems and services to global cybersecurity standards and regulations. Cybersecurity Projects and Services are also a major opportunity for growth of our business. The Field Service LOB Security Advisor reports to the GCP&SO Cybersecurity Leader, with a functional link with Energy Management BU security officer FS LOB Security Advisor engage with service offer teams, providing support with cybersecurity topics with the objective of ensuring Services are secure. He also fills the role of a Subject Matter Expert, serving as a consultant and advisor for cybersecurity topics. FS LOB Security Advisor is responsible for the implementation and adoption of the Secure Development Lifecycle (SDL) framework as well as other cybersecurity best practices. He is in charge of ensuring cybersecurity requirements, guidelines and processes are executed in an efficient and quality manner. His objectives are achieved through close follow-up, monitoring and continuous evaluation of the offers he is responsible for. Key responsibilities of the role Ensure services development teams abide with risk-driven cyber security processes and controls, Product security office (PSO) defined frameworks and controls Serve as the subject matter expert for all product and services cyber related questions (Threats, vulnerabilities, etc.) Serve as a consultant in SDL implementation on service offer Participate to security incident response processes Contribute as a service offer team member in change initiatives aimed at growing its security capabilities Communicate with senior management on risk management concepts, as well as specific project risks and risk mitigation options / scenarios Maintain current knowledge on operational security topics and their applicability to Schneider Electric’s industry Guide LOB team members through security processes and ensure the following aspects remain on track: Vulnerability management scanning and remediation Security compliance and remediation Security awareness and training Incident response practices in place Threat modeling performed for offers SDL and security functionalities requirements are applied for services Software applications certifications Collect lessons learnt from conducted projects Key skills and requirements Strong experience as a team member of a large and/or complex cybersecurity-related project Broad knowledge of products and systems security and regulatory requirements Ability to align operational/information security policies with business requirements Attention to detail, ability to translate operational/information security requirements into security controls Strong ability for teamwork Ability to effectively adapt to and apply rapidly changing technology to business needs Problem-solving skills Technical skills : Threat Modeling, Digital certification, SDL, secure coding, Web server /client architectures and configuration, authentication principles, cybersecurity tools for software development and web applications Qualifications Required: 3+ years of OT/IT security experience with a proven ability to engage with Senior Management, Product, Engineering and the business. Master’s degree in IT/Computing/Engineering required, or related degree from an accredited university Fluency in English Experience working cross functionally and collaboratively in a team environment Experience working in an international environment Experience related to cyber security in products or services development Experience guiding and assisting organizations in implementing appropriate Cybersecurity practices Preferred: Strong analytical and problem-solving skills CISSP certification Project management skills preferred Prior experience performing security reviews and risk assessments Schedule: Full-time Req: 0085SC