Emerging Platforms Security Lead

«out our Company Schneider Electric is the global specialist in energy management and automation. With revenues of ~€25 billion in FY2016, our 144,000+ employees serve customers in over 100 countries, helping them to manage their energy and process in ways that are safe, reliable, efficient and sustainable. From the simplest of switches to complex operational systems, our technology, software, and services improve the way our customers manage and automate their operations. Our connected technologies reshape industries, transform cities and enrich lives. At Schneider Electric, we call this Life Is On. At Schneider Electric, Cybersecurity is not an afterthought. Its companywide Cyber-security posture aims at securing the digital journey of Schneider, its partners, and its customers through: Strong and comprehensive digital governance and risk management A set of risk prevention, detection, and response capabilities and operational plan Specific attention to High-Value Assets A set of Reality Check metrics This Cybersecurity posture fuels Schneider Electric innovation in IoT and enables the Company to advance IT/OT convergence and to ensure that Schneider, its partners, and customers can thrive in today’s digital economy. Job purpose The Emerging Platforms Security Manager is part of the Schneider Digital End-to-End Digital Customer Relationship (DCR), that is supporting mainly the Sales and Customer support organizations, and many other business processes. He/she is reporting to the Emerging Platform Manager and the Digital Risk Leader. He/she is responsible to ensure the compliance of our portfolio with cybersecurity standards and practices. Key Responsibilities The job consists of Ensuring the compliance of our portfolio with cybersecurity standards and practices: Ensure platforms / applications are certified (and remain certified) and enforce security programs (License to Prod, Crown Jewel) as required Define and enforce Identity and Access Management over the scope, including profile definition, account management workflows (creation/ deletion) Assesses data protection needs (GDPR compliance…) and ensures adequate technical/organizational measures are in place Oversees cybersecurity behavior from dev + operations teams supporting the platform Delivers Cybersecurity training and awareness to the teams Ensure efficient coordination of incidents management impacting the platform with pertinent stakeholders as IT specialist, Practices leaders, Country or Line of Business responsible, Customers point of contacts, Third parties; Coordinate and track actions plan Deploy the Security Development Lifecycle (SDLC): threat modelling, code review, security testing, … And more details: Cloud & 3rd parties application security, contractual cybersecurity clauses Interface with the Corporate Schneider Security team with respect to global artefacts and guidelines, dashboards, etc Coordinates connection of application/platform to monitoring tools (log correlation, SOC etc) Builds a cybersecurity dashboard Compliance controls for SOC2 and PCI-DSS Security on the PaaS, SaaS based platform Managing and validating CDN(Fastly), DDos, WAF configuration with Vendor server firewalls (i.e., IP tables) and perimeter firewalls (e.g., security groups) Ensuring Business Continuity with appropriate DRP Qualifications Ability to identify issues/risk, analyse and understand underlying causes and devise appropriate action plans Ability to work with autonomy Excellent written and verbal interpersonal skills Comfortable presenting and collaborating with Peers, working in a global project team in an international environment Ability to multi task, and to work under pressure Bachelor’s degree; Computer Science, Management Information Systems or Engineering/Science required Fluent in English Recommended: Certification as a Certified Information Security Systems Security Professional (CISSP), or Certified Information Security Manager (CISM); Security standards: ISO27001, NIST Schedule: Full-time Req: 007F8D