Product & Solution Security Officer and CRA (f/m/d)

Siemens; Nürnberg; Hybrid; EUR 110.000 - 140.000; Vollzeit

Benefits dieser Stelle

Remuneration package

Pension benefits

Siemens share plans

30 days vacation

Flexible work schedules

Mobile working 2-3 days/week

Zusammenfassung

Siemens Grid Software in Germany seeks a visionary Product and Solution Security Officer (PSSO) to champion our PSS program and embed cybersecurity across the software development lifecycle. You will partner with the Agile Program Management Office to drive security innovations in agile teams.

As a trusted advisor, you will guide R&D and PLM leadership, promote Communities of Practice, and ensure secure product design and risk management across solutions and platforms.

Qualifikationen

• Master's degree in Computer Science, Information Technology, or a related field.
• Extensive experience in cybersecurity for software development and engineering.
• In-depth knowledge of IEC 62443, ISO 27000, and related standards.
• Proven track record implementing regulatory requirements in agile environments.
• Experience with LeSS or SAFe and IT/OT security in product development.

Aufgaben

• Define and maintain cybersecurity policies and roadmaps for the business unit, aligning with ISO/IEC 27001, IEC 62443, NIS2, and SOC2.
• Lead the integration of secure development practices into the agile SDLC of SI GSW.
• Steer cybersecurity compliance activities and advise on security requirements to meet CRA and IEC 62443.
• Manage product vulnerabilities and incidents while collaborating with stakeholders to define risk acceptance criteria.

Kenntnisse

Cybersecurity

Software development

IT security

ISO 27000

IEC 62443

Regulatory compliance

DevOps

CI/CD

LeSS/SAFe

English proficiency

Ausbildung

Master's degree

Tools

Containers

CI/CD tools

Jobbeschreibung

We are looking for a visionary Product and Solution Security Officer (PSSO) to champion our PSS program within Siemens SI GSW. As a key driver of our continuous quality culture, you will ensure that cybersecurity is deeply integrated into our software development lifecycle. Acting as a 'Continuous Security Agent,' you will partner with the Agile Program Management Office (APMO) to bring state-of-the-art security innovations to our agile teams. You will build vibrant communities and guilds to promote a culture of continuous learning. As a trusted advisor, you will guide R&D and PLM leadership, collaborating closely with the SI GSW Cybersecurity Officer to provide functional guidance to our network of PSSEs.

What We Offer You

• An attractive remuneration package
• Appealing Siemens pension benefits
• Access to Siemens share plans
• 30 days of paid vacation and a variety of flexible work schedules that allow time off for you and your family
• 2 to 3 days of mobile working per week as a global standard

Since each of over 300,000 team members feels that other benefits are particularly important, and we cannot list our entire benefit portfolio here, you can find more information here.

The individual benefits are subject to regulatory, contractual, or corporate conditions.

You’ll make an impact by

• Defining and maintaining cybersecurity policies, strategies, and roadmaps for the business unit, ensuring alignment with international standards and attestations such as ISO/IEC 27001, IEC 62443, NIS2, and SOC2.
• Steering improvement programs to integrate secure development practices - including threat and risk analysis, secure coding, and security testing - directly into the agile software development lifecycle of SI GSW.
• Leading cybersecurity compliance activities and providing expert guidance on security requirements to ensure adherence to regulations like the Cyber Resilience Act (CRA) and IEC 62443.
• Managing product vulnerabilities and incidents while collaborating with stakeholders to identify security risks and define clear risk acceptance criteria for our solutions.
• Driving innovative IT/Cybersecurity initiatives from Proof of Concept (PoC) to productive use by partnering with PSSEs, Release Train Engineers, and agile development teams.
• Guiding stakeholders and fostering a culture of continuous learning by emphasizing technological security needs to Product Managers, Owners, and Architects to ensure sustainable security expertise.
• Measuring and reporting the status of adherence to PSS standards and policies, while representing the R&D department in all product and solution security matters.

This Is How You’ll Win Us Over

• Education: You hold a Master's degree in Computer Science, Information Technology, or a comparable background. (Cybersecurity certifications such as CISSP or CSSLP are an advantage).
• Experience & Skills:
  • Extensive long-term experience and demonstrated expertise in cybersecurity, software development, and engineering, including in-depth knowledge of IT/Cybersecurity requirements.
  • Deep knowledge of IEC 62443, ISO 27000, and related standards, with years of experience in IT/Cybersecurity for product development, solution design, and OT operations.
  • Proven track record in implementing regulatory requirements within agile environments.
  • Experience in managing or supporting the release of large-scale software projects, with a strong proficiency in conducting risk assessments and implementing subsequent risk management strategies.
  • Active commitment to knowledge sharing, including the initiation of "Communities of Practice" and the creation of technical blueprints, templates, and building blocks.
  • Strong proficiency in agile development and DevOps principles, including a solid understanding of CI/CD pipelines and container technologies.
  • Practical experience with agile scaling frameworks such as LeSS or SAFe.
  • Experience working in international, multicultural agile organizations with a high degree of quality awareness.
  • Ability to structure and guide new security-related processes and regulations across the entire organization.
• Ways of working:
  • Analytical thinking, strong problem-solving skills, and reliability, even in complex situations.
  • Proven ability to collaborate efficiently across functional and project boundaries, with the skill to effectively communicate complex content and risks to stakeholders at all organizational levels, including senior management.
  • A proactive mindset and the willingness to go the extra mile as part of our ambitious and multicultural SI GSW team.
• Languages: Professional proficiency in English is required; German language skills are an advantage.

You are much more than your qualifications, and we believe in the potential of every single candidate. We look forward to getting to know you!

At Siemens, we believe that feeling valued and included is the foundation for doing great work. That’s why we aim to create an inclusive workplace where everyone feels a sense of belonging, and where individual perspectives and experiences are celebrated. Our commitment to fairness and respect extends to every applicant.

As an equal opportunity employer, we welcome applications from individuals of all backgrounds and particularly encourage applications from persons with disabilities. In the case of equal qualifications, severely disabled applicants and applicants with equivalent status will be given preference.

About Us

Here at Siemens Grid Software, our mission is to accelerate and secure the energy transition in a sustainable and profitable way. And for that we need you! We are paving the way for autonomous grid management empowering grid operators to accelerate their digital transformation easier, faster, and at scale.

By leaving behind traditional ways of tackling the net zero challenge and embracing the powerful capabilities of software and digital technology, we turn the complexity of grids into competitive advantage. No matter where power comes from or where it goes, we make sure it makes its way at every step.

Find out how Siemens Grid Software is decoding the future of energy.

Join our team, get inspired, and help us re-imagine the world!

www.siemens.de/careers – if you would like to find out more about jobs & careers at Siemens.

FAQ – if you need further information on the application process.