Product and Solution Security Officer - R&D (f/m/d)

Knowledge for the world of tomorrow. For our continuous quality culture, we are looking for an experienced Product and Solution Security Officer (PSSO) driving the Product and Solution Security (PSS) program within the development departments of Siemens Smart Infrastructure Grid Software (SI GSW). The PSSO (R&D) has the responsibility to actively drive product & solution security across our SI GSW products and solutions to ensure the R&D conformity according to the valid IT/Cyber Security standards and Cybersecurity Governance. The Product & Solution Security Officer will act as “Continuous Security Agent” and will work with all other “Continuous X Agents” of the Agile Program Management Office (APMO) closely together to realize best practises, state-of-the-art as well as innovative approaches at the agile development teams. In order to achieve this, he/she will establish active community of practises, guilds, or other continuous learning approaches. In this role the PSSO advises the particular R&D & PLM/PM leads as well as the senior management with regard to IT/Cyber security in cooperation with the SI GSW Cybersecurity Officer. What part will you play? Define Regulations & Support Implementation – Drive the definition of an individual PSS strategy with special focus on R&D development teams Based on individual implementation policy of the SI GSW product deployments, steer an improvement program to establish and maintain appropriate processes, methods, and tools in the development teams (e.g., integrate threat & risk analysis, security requirements engineering, secure architecture and design, hardening, secure coding, security testing) Drive important IT/Cyber Security initiatives (from proof of Concepts (POC) until productive use) together with PSSEs, R&D agile experts, Release Train Engineers as well as agile teams of our SI GSW products, establishing a sustainable PSS solution for our customers Guide technological aspects – Ensure & continuously emphasize the importance of the needs to all the relevant stakeholders (i.e., Product Manager, Product Owner, Architects as well as team leads, etc.), that especially for IT/Cyber Security topics there is the need to establish a continuous learning approach in the development teams Measure & Report - Track continuously the status of adherence and application of product and solution security standards, processes, and policies as well as the implementation policy by establishing online Health Check dashboards Together with relevant stakeholders decide how to handle identified security risks in products and solutions and define risk acceptance criteria together Support Communication – Represent together with the assigned PSSE the R&D department in all product & solution security matters What do you need to make real what matters? You have a bachelor's degree in computer science, information technology or a comparable field of study and have many years of experience in software development & engineering with in-depth knowledge of IT/Cyber Security requirements You bring deep Knowledge of IEC 62443, ISO27000, NIST800 or similar and years of experience with IT / Cyber security in product development, solutions design and OT operations You are actively committed to ensuring that the necessary expert knowledge is distributed and