EU Product Security Officer, Regulatory & Standards Engagement (m/w/d)

Emerson Electric Co; Berlin; Hybrid; EUR 120,000 - 150,000; Full time

Job summary

Emerson Electric Co is seeking an EU Product Security Officer to lead product cybersecurity across EU portfolios. You will act as the go-to expert for regulatory forums, drive secure development processes, and ensure compliance with evolving EU laws.

You will mentor security leads and coordinate cross-functional teams to maintain Emerson's leadership in OT cybersecurity within Europe. The role requires senior credibility in the European industrial cybersecurity community, fluency in English and

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Electrical or Systems Engineering, or related field.
• 12+ years in product security or industrial/embedded cybersecurity assurance with senior IC experience.
• Business-level English and German.
• Proven track record in cybersecurity standards bodies or regulatory forums.
• Experience interpreting EU cybersecurity regulations (CRA, NIS-2, RED) into internal requirements.
• Deep SDL, threat modeling, vulnerability management, SBOM governance.
• Coordination of vulnerability management across teams.

Responsibilities

• Serve as Emerson's senior representative in EU cybersecurity regulatory and standards forums contributing to standards drafts and harmonized standard development.
• Provide final cybersecurity sign-off authority on EU product releases and governance in gate reviews across multiple product companies.
• Drive the secure development lifecycle (SDL) across multiple EU-based product companies and regulatory regimes.
• Translate evolving EU legislation into actionable internal requirements for product security.
• Own software supply chain security strategy and third-party risk assessment.
• Apply expertise in authentication, cryptography, secure updates, and hardening to guide design decisions.
• Mentor Product Security Leads and cross-functional partners across the EU portfolio.
• Anticipate regulatory shifts and recommend investments in tooling and processes.
• Maintain public technical visibility through publications and conferences.

Skills

Cybersecurity

English

German

Regulatory representation

Threat modeling

PSIRT operations

Vulnerability management

Embedded security

Industrial cybersecurity

Education

Cybersecurity degree

Engineering degree

Master's degree

Job description

As an EU Product Security Officer (m/w/d), you will be our product cybersecurity authority in the European Union — operating as a recognized expert with enterprise-wide scope, final cybersecurity sign-off authority across multiple product portfolios, and the public face of Emerson within EU cybersecurity regulatory and standards bodies.

You will own and drive product cybersecurity outcomes for EU-relevant products and programs by embedding secure development practices into product lifecycles, leading vulnerability readiness and response, and ensuring evidence-based compliance with the EU Cyber Resilience Act, NIS-2, and other evolving cybersecurity regulations. Critically, you will represent Emerson and Measurement Solutions in EU regulatory, standards, and working-group forums — including CENELEC, DKE, ZVEI, and ETSI — translating external requirements into practical internal guidance, shaping harmonized standards on Emerson's behalf, and influencing the trajectory of OT cybersecurity policy across Europe.

This role is positioned at Emerson's Distinguished Technologist level and is open to senior practitioners who have already established credibility within the European industrial cybersecurity community. Join us in safeguarding our products and advancing Emerson's commitment to cybersecurity excellence.

In This Role, Your Responsibilities Will Be:

• Serve as Emerson's senior representative in EU cybersecurity regulatory and standards forums contributing to standards drafts, position papers, and harmonized standard development under the EU Cyber Resilience Act (CRA).
• Provide final cybersecurity sign-off authority on EU product release decisions and serve as a governance member in product gate reviews across multiple Measurement Solutions product companies.
• Drive the secure development lifecycle (SDL) - including security requirements definition, threat modeling, secure design reviews, and release readiness criteria - across multiple EU-based product companies operating under diverse regulatory regimes.
• Translate evolving EU cybersecurity legislation into actionable internal product security requirements, ensuring product teams operate from a unified compliance baseline rather than interpreting regulation independently.
• Own software supply chain security strategy and execution, third-party component risk assessment, supplier assurance, and vulnerability impact analysis aligned with emerging regulatory requirements.
• Apply deep expertise in product and embedded security fundamentals - authentication, cryptography, secure update mechanisms, and system hardening - to guide architectural and design decisions across diverse product technologies.
• Mentor and coach Product Security Leads, engineers, and cross-functional partners across the EU portfolio; serve as a trusted technical authority to product management, engineering leadership, and legal/compliance teams.
• Anticipate future regulatory and threat-landscape shifts; recommend strategic investments in cybersecurity tooling, process, and capability that position Emerson ahead of compliance deadlines and competitive pressure.
• Maintain public technical visibility through publications, conference participation, working group leadership, and engagement with the broader European cybersecurity community where appropriate - building and protecting Emerson's reputation as a serious participant in Operational Technology cybersecurity.
• Develop and maintain product-level security documentation, compliance artifacts, and customer-facing cybersecurity materials that meet regulatory evidence requirements and customer expectations.

Who You Are:

You are a high-performing individual contributor with a strong passion for cybersecurity. You enjoy understanding new technologies and how they should be governed throughout their lifecycle. You value exposure to diverse technologies and are proactive in researching and developing new skills as needed. You are collaborative, detail-oriented, and comfortable working across engineering, legal, compliance, and customer-facing teams.

For This Role, You Will Need:

• Bachelor’s degree in Cybersecurity, Computer Science, Electrical or Systems Engineering, or a related field.
• Minimum 12 years of progressive experience in product security, secure product development, or industrial/embedded cybersecurity assurance, including at least 5 years in a senior, principal, or distinguished individual contributor role.
• Business-level English and German (mandatory).
• Proven track record of representing an organization in cybersecurity standards bodies or regulatory working groups — such as IEC 62443, CENELEC, DKE, ETSI, ISA/ISA99, ENISA, or equivalent national or EU forums.
• Demonstrated experience interpreting and implementing EU cybersecurity regulations, including the Cyber Resilience Act, NIS-2 Directive, RED Delegated Act, or comparable frameworks.
• Deep expertise across secure development lifecycle practices, threat modeling, vulnerability management, PSIRT operations, and SBOM / software supply chain governance for industrial or embedded products.
• Experience coordinating vulnerability management and disclosure activities with engineering, legal, and customer-facing teams.

Preferred Qualifications That Set You Apart:

• Master’s degree in Cybersecurity, Computer Science, Electrical or Systems Engineering, or a related field.
• Min 15 years of experience in industrial control systems or OT product cybersecurity.
• Existing membership, leadership role, or recognized credential within German or EU cybersecurity bodies.
• TeleTrusT T.I.S.P., CISSP, GICSP, ISA/IEC 62443 Cybersecurity Expert, or equivalent senior cybersecurity certifications.
• Demonstrated authorship of, or substantive contribution to, published cybersecurity standards, technical specifications, or industry position papers.
• Experience leading regulatory compliance programs for industrial measurement, control, or automation products.
• Prior experience as a Product Security Officer, Chief Product Security Officer, Distinguished Engineer, Principal Security Architect, or equivalent senior individual contributor role at an industrial manufacturer.

Our Culture & Commitment to You:

At Emerson, we prioritize a workplace where every employee is valued, respected, and empowered to grow. We foster an environment that encourages innovation, collaboration, and diverse perspectives - because we know that great ideas come from great teams. Our commitment to ongoing career development and growing an inclusive culture ensures you have the support to thrive. Whether through mentorship, training, or leadership opportunities, we invest in your success so you can make a lasting impact. We believe diverse teams, working together are key to driving growth and delivering business results.

Learn more about ourCulture & Values.