Product & Solution Security Officer and CRA (f/m/d)

Arbeitsagentur; Nürnberg; Vor Ort; EUR 120.000 - 180.000; Vollzeit

Benefits dieser Stelle

Siemens pension benefits

Siemens share plans

30 days of paid vacation

Flexible work schedules

2–3 days mobile working per week

Zusammenfassung

Siemens Grid Software (SI GSW) is seeking a visionary Product and Solution Security Officer to champion our PSS program. You will integrate cybersecurity deeply into the software development lifecycle, guiding R&D and PLM leadership and collaborating with PSSEs, Release Train Engineers, and agile teams.

You will drive secure practices, risk analysis, and compliance with CRA and IEC62443, while promoting a culture of continuous learning and innovation across an international organization.

Qualifikationen

• Master's degree in Computer Science, Information Technology, or a comparable background.
• Cybersecurity certifications such as CISSP or CSSLP are an advantage.
• Extensive experience in cybersecurity for software development and engineering.

Aufgaben

• Define and maintain cybersecurity policies, strategies, and roadmaps for the business unit.
• Integrate secure development practices into the agile software development lifecycle.
• Lead cybersecurity compliance activities and guide on CRA and IEC62443.
• Manage product vulnerabilities and incidents with stakeholders on risk criteria.
• Drive IT/Cybersecurity initiatives from PoC to production with PSSEs and agile teams.
• Promote Communities of Practice and create technical blueprints and templates.
• Guide stakeholders to ensure sustainable security expertise across the organization.

Kenntnisse

Cybersecurity

Software development

Agile

DevOps

Threat analysis

Secure coding

Security testing

Stakeholder management

Ausbildung

Master's degree in Computer Science or IT

Cybersecurity certifications such as CISSP or CSSLP (advantage)

Tools

CI/CD pipelines

Container technologies

LeSS

SAFe

Jobbeschreibung

We are looking for a visionary Product and Solution Security Officer (PSSO) to champion our PSS program within Siemens SI GSW. As a key driver of our continuous quality culture, you will ensure that cybersecurity is deeply integrated into our software development lifecycle. Acting as a 'Continuous Security Agent,' you will partner with the Agile Program Management Office (APMO) to bring state-of-the-art security innovations to our agile teams. You will build vibrant communities and guilds to promote a culture of continuous learning. As a trusted advisor, you will guide R&D and PLM leadership, collaborating closely with the SI GSW Cybersecurity Officer to provide functional guidance to our network of PSSEs.

What we offer you

• An attractive remuneration package
• Appealing Siemens pension benefits
• Access to Siemens share plans
• 30 days of paid vacation and a variety of flexible work schedules that allow time off for you and your family
• 2 to 3 days of mobile working per week as a global standard

Since each of over 300,000 team members feels that other benefits are particularly important, and we cannot list our entire benefit portfolio here, you can find more information here. The individual benefits are subject to regulatory, contractual, or corporate conditions.

You’ll make an impact by

• Defining and maintaining cybersecurity policies, strategies, and roadmaps for the business unit, ensuring alignment with international standards and attestations such as ISO/IEC27001, IEC62443, NIS2, and SOC2.
• Steering improvement programs to integrate secure development practices - including threat and risk analysis, secure coding, and security testing - directly into the agile software development lifecycle of SI GSW.
• Leading cybersecurity compliance activities and providing expert guidance on security requirements to ensure adherence to regulations like the Cyber Resilience Act (CRA) and IEC62443.
• Managing product vulnerabilities and incidents while collaborating with stakeholders to identify security risks and define clear risk acceptance criteria for our solutions.
• Driving innovative IT/Cybersecurity initiatives from Proof of Concept (PoC) to productive use by partnering with PSSEs, Release Train Engineers, and agile development teams.
• Guiding stakeholders and fostering a culture of continuous learning by emphasizing technological security needs to Product Managers, Owners, and Architects to ensure sustainable security expertise.
• Measuring and reporting the status of adherence to PSS standards and policies, while representing the R&D department in all product and solution security matters.

This is how you'll win us over

• Education: You hold a Master's degree in Computer Science, Information Technology, or a comparable background. (Cybersecurity certifications such as CISSP or CSSLP are an advantage).
• Experience & Skills:
• Extensive long-term experience and demonstrated expertise in cybersecurity, software development, and engineering, including in-depth knowledge of IT/Cybersecurity requirements.
• Deep knowledge of IEC62443, ISO27000, and related standards, with years of experience in IT/Cybersecurity for product development, solution design, and OT operations.
• Proven track record in implementing regulatory requirements within agile environments.
• Experience in managing or supporting the release of large-scale software projects, with a strong proficiency in conducting risk assessments and implementing subsequent risk management strategies.
• Active commitment to knowledge sharing, including the initiation of \"Communities of Practice\" and the creation of technical blueprints, templates, and building blocks.
• Strong proficiency in agile development and DevOps principles, including a solid understanding of CI/CD pipelines and container technologies.
• Practical experience with agile scaling frameworks such as LeSS or SAFe.
• Experience working in international, multicultural agile organizations with a high degree of quality awareness.
• Ability to structure and guide new security-related processes and regulations across the entire organization.

Ways of working:

• Analytical thinking, strong problem-solving skills, and reliability, even in complex situations.
• Proven ability to collaborate efficiently across functional and project boundaries, with the skill to effectively communicate complex content and risks to stakeholders at all organizational levels, including senior management.
• A proactive mindset and the willingness to go the extra mile as part of our ambitious and multicultural SI GSW team.

Languages:

Professional proficiency in English is required; German language skills are an advantage.

You are much more than your qualifications, and we believe in the potential of every single candidate. We look forward to getting to know you!

As an equal opportunity employer, we welcome applications from individuals of all backgrounds and particularly encourage applications from persons with disabilities. In the case of equal qualifications, severely disabled applicants and applicants with equivalent status will be given preference.

About us

Here at Siemens Grid Software, our mission is to accelerate and secure the energy transition in a sustainable and profitable way. And for that we need you! We are paving the way for autonomous grid management empowering grid operators to accelerate their digital transformation easier, faster, and at scale. By leaving behind traditional ways of tackling the net zero challenge and embracing the powerful capabilities of software and digital technology, we turn the complexity of grids into competitive advantage. No matter where power comes from or where it goes, we make sure it makes its way at every step.

Find out how Siemens Grid Software is decoding the future of energy.

Join our team, get inspired, and help us re-imagine the world!

www.siemens.de/careers – if you would like to find out more about jobs & careers at Siemens.

FAQ – if you need further information on the application process.