EU Product Security Officer, Regulatory & Standards Engagement (m/w/d)

RxREVU, Inc.; Berlin; Vor Ort; EUR 140.000 - 200.000; Vollzeit

Zusammenfassung

Emerson is seeking an EU Product Security Officer (m/w/d) to act as the cybersecurity authority across EU product portfolios. You will embed secure development practices, lead vulnerability readiness, and ensure compliance with CRA, NIS-2, and related EU regulations.

You will represent Emerson in EU regulatory forums, provide final sign-off on EU releases, and mentor security leads across multiple product groups.

Qualifikationen

• Bachelor's degree in Cybersecurity, Computer Science, Electrical or Systems Engineering, or a related field.
• Minimum 12 years of progressive experience in product security, secure product development, or industrial/embedded cybersecurity assurance, including at least 5 years in a senior, principal, or distinguished individual contributor role.
• Business-level English and German (mandatory).
• Proven track record of representing an organization in cybersecurity standards bodies or regulatory working groups — IEC 62443, CENELEC, DKE, ETSI, ISA/ISA99, ENISA, or equivalent.
• Demonstrated experience interpreting and implementing EU cybersecurity regulations, including the Cyber Resilience Act, NIS-2 Directive, RED Delegated Act, or comparable frameworks.
• Deep expertise across secure development lifecycle practices, threat modeling, vulnerability management, PSIRT operations, and SBOM / software supply chain governance for industrial or embedded products.
• Experience coordinating vulnerability management and disclosure activities with engineering, legal, and customer-facing teams.

Aufgaben

• Serve as Emerson's senior representative in EU cybersecurity regulatory and standards forums contributing to standards drafts, position papers, and harmonized standard development under the EU Cyber Resilience Act (CRA).
• Provide final cybersecurity sign-off authority on EU product release decisions and serve as a governance member in product gate reviews across multiple Measurement Solutions product companies.
• Drive the secure development lifecycle (SDL) - including security requirements definition, threat modeling, secure design reviews, and release readiness criteria - across multiple EU-based product companies operating under diverse regulatory regimes.
• Translate evolving EU cybersecurity legislation into actionable internal product security requirements, ensuring product teams operate from a unified compliance baseline rather than interpreting regulation independently.
• Own software supply chain security strategy and execution, third-party component risk assessment, supplier assurance, and vulnerability impact analysis aligned with emerging regulatory requirements.
• Apply deep expertise in product and embedded security fundamentals - authentication, cryptography, secure update mechanisms, and system hardening - to guide architectural and design decisions across diverse product technologies.
• Mentor and coach Product Security Leads, engineers, and cross-functional partners across the EU portfolio; serve as a trusted technical authority to product management, engineering leadership, and legal/compliance teams.
• Anticipate future regulatory and threat-landscape shifts; recommend strategic investments in cybersecurity tooling, process, and capability that position Emerson ahead of compliance deadlines and competitive pressure.
• Maintain public technical visibility through publications, conference participation, working group leadership, and engagement with the broader European cybersecurity community where appropriate - building and protecting Emerson's reputation as a serious participant in Operational Technology cybersecurity.
• Develop and maintain product-level security documentation, compliance artifacts, and customer-facing cybersecurity materials that meet regulatory evidence requirements and customer expectations.

Kenntnisse

Cybersecurity expertise

Regulatory engagement

Public speaking

Cross-functional collaboration

Bilingual English/German

Ausbildung

Bachelor's degree in Cybersecurity/CS/Engineering

Master's degree in Cybersecurity/CS/Engineering

Jobbeschreibung

Job Description

As an EU Product Security Officer (m/w/d), you will be our product cybersecurity authority in the European Union - operating as a recognized expert with enterprise-wide scope, final cybersecurity sign-off authority across multiple product portfolios, and the public face of Emerson within EU cybersecurity regulatory and standards bodies.

You will own and drive product cybersecurity outcomes for EU-relevant products and programs by embedding secure development practices into product lifecycles, leading vulnerability readiness and response, and ensuring evidence-based compliance with the EU Cyber Resilience Act, NIS-2, and other evolving cybersecurity regulations. Critically, you will represent Emerson and Measurement Solutions in EU regulatory, standards, and working-group forums - including CENELEC, DKE, ZVEI, and ETSI - translating external requirements into practical internal guidance, shaping harmonized standards on Emerson's behalf, and influencing the trajectory of OT cybersecurity policy across Europe.

This role is positioned at Emerson's Distinguished Technologist level and is open to senior practitioners who have already established credibility within the European industrial cybersecurity community. Join us in safeguarding our products and advancing Emerson's commitment to cybersecurity excellence.

In This Role, Your Responsibilities Will Be:

• Serve as Emerson's senior representative in EU cybersecurity regulatory and standards forums contributing to standards drafts, position papers, and harmonized standard development under the EU Cyber Resilience Act (CRA).
• Provide final cybersecurity sign-off authority on EU product release decisions and serve as a governance member in product gate reviews across multiple Measurement Solutions product companies.
• Drive the secure development lifecycle (SDL) - including security requirements definition, threat modeling, secure design reviews, and release readiness criteria - across multiple EU-based product companies operating under diverse regulatory regimes.
• Translate evolving EU cybersecurity legislation into actionable internal product security requirements, ensuring product teams operate from a unified compliance baseline rather than interpreting regulation independently.
• Own software supply chain security strategy and execution, third-party component risk assessment, supplier assurance, and vulnerability impact analysis aligned with emerging regulatory requirements.
• Apply deep expertise in product and embedded security fundamentals - authentication, cryptography, secure update mechanisms, and system hardening - to guide architectural and design decisions across diverse product technologies.
• Mentor and coach Product Security Leads, engineers, and cross-functional partners across the EU portfolio; serve as a trusted technical authority to product management, engineering leadership, and legal/compliance teams.
• Anticipate future regulatory and threat-landscape shifts; recommend strategic investments in cybersecurity tooling, process, and capability that position Emerson ahead of compliance deadlines and competitive pressure.
• Maintain public technical visibility through publications, conference participation, working group leadership, and engagement with the broader European cybersecurity community where appropriate - building and protecting Emerson's reputation as a serious participant in Operational Technology cybersecurity.
• Develop and maintain product-level security documentation, compliance artifacts, and customer-facing cybersecurity materials that meet regulatory evidence requirements and customer expectations.

Who You Are:

You are a high-performing individual contributor with a strong passion for cybersecurity. You enjoy understanding new technologies and how they should be governed throughout their lifecycle. You value exposure to diverse technologies and are proactive in researching and developing new skills as needed. You are collaborative, detail-oriented, and comfortable working across engineering, legal, compliance, and customer-facing teams.

For This Role, You Will Need:

• Bachelor's degree in Cybersecurity, Computer Science, Electrical or Systems Engineering, or a related field.
• Minimum 12 years of progressive experience in product security, secure product development, or industrial/embedded cybersecurity assurance, including at least 5 years in a senior, principal, or distinguished individual contributor role.
• Business-level English and German (mandatory).
• Proven track record of representing an organization in cybersecurity standards bodies or regulatory working groups - such as IEC 62443, CENELEC, DKE, ETSI, ISA/ISA99, ENISA, or equivalent national or EU forums.
• Demonstrated experience interpreting and implementing EU cybersecurity regulations, including the Cyber Resilience Act, NIS-2 Directive, RED Delegated Act, or comparable frameworks.
• Deep expertise across secure development lifecycle practices, threat modeling, vulnerability management, PSIRT operations, and SBOM / software supply chain governance for industrial or embedded products.
• Experience coordinating vulnerability management and disclosure activities with engineering, legal, and customer-facing teams.

Preferred Qualifications That Set You Apart:

• Master's degree in Cybersecurity, Computer Science, Electrical or Systems Engineering, or a related field.
• Min 15 years of experience in industrial control systems or OT product cybersecurity.
• Existing membership, leadership role, or recognized credential within German or EU cybersecurity bodies.
• TeleTrusT T.I.S.P., CISSP, GICSP, ISA/IEC 62443 Cybersecurity Expert, or equivalent senior cybersecurity certifications.
• Demonstrated authorship of, or substantive contribution to, published cybersecurity standards, technical specifications, or industry position papers.
• Experience leading regulatory compliance programs for industrial measurement, control, or automation products.
• Prior experience as a Product Security Officer, Chief Product Security Officer, Distinguished Engineer, Principal Security Architect, or equivalent senior individual contributor role at an industrial manufacturer.

Our Culture & Commitment to You:

At Emerson, we prioritize a workplace where every employee is valued, respected, and empowered to grow. We foster an environment that encourages innovation, collaboration, and diverse perspectives-because we know that great ideas come from great teams. Our commitment to ongoing career development and growing an inclusive culture ensures you have the support to thrive. Whether through mentorship, training, or leadership opportunities, we invest in your success so you can make a lasting impact. We believe diverse teams, working together are key to driving growth and delivering business results.

Learn more about our Culture & Values.

About Us

WHY EMERSON

At Emerson, we prioritize a workplace where every employee is valued, respected, and empowered to grow. We foster an environment that encourages innovation, collaboration, and diverse perspectives-because we know that great ideas come from great teams. Our commitment to ongoing career development and growing an inclusive culture ensures you have the support to thrive. Whether through mentorship, training, or leadership opportunities, we invest in your success so you can make a lasting impact. We believe diverse teams, working together are key to driving growth and delivering business results.

Our Commitment to Our People

At Emerson, we are motivated by a spirit of collaboration that helps our diverse, multicultural teams across the world drive innovation that makes the world healthier, safer, smarter, and more sustainable. And we want you to join us in our bold aspiration.

We have built an engaged community of inquisitive, dedicated people who thrive knowing they are welcomed, trusted, celebrated, and empowered to solve the world's most complex problems - for our customers, our communities, and the planet. You'll contribute to this vital work while further developing your skills through our award-winning employee development programs. We are a proud corporate citizen in every city where we operate and are committed to our people, our communities, and the world at large. We take this responsibility seriously and strive to make a positive impact through every endeavor.

At Emerson, you'll see firsthand that our people are at the center of everything we do. So, let's go. Let's think differently. Learn, collaborate, and grow. Seek opportunity. Push boundaries. Be empowered to make things better. Speed up to break through. Let's go, together.

Accessibility Assistance or Accommodation

If you have a disability and are having difficulty accessing or using this website to apply for a position, please contact: [e-mail].

ABOUT EMERSON

Emerson is a global leader in automation technology and software. Through our deep domain expertise and legacy of flawless execution, Emerson helps customers in critical industries like life sciences, energy, power and renewables, chemical and advanced factory automation operate more sustainably while improving productivity, energy security and reliability.

With global operations and a comprehensive portfolio of software and technology, we are helping companies implement digital transformation to measurably improve their operations, conserve valuable resources and enhance their safety.

We offer equitable opportunities, celebrate diversity, and embrace challenges with confidence that, together, we can make an impact across a broad spectrum of countries and industries. Whether you're an established professional looking for a career change, an undergraduate student exploring possibilities, or a recent graduate with an advanced degree, you'll find your chance to make a difference with Emerson. Join our team - let's go!