Cyber Security Architect - Senior Professional

Schneider Electric; Mumbai; Sur place; INR 2 500 000 - 3 500 000; Plein temps

Avantages offerts par ce poste

Equal opportunity employer

Résumé du poste

A leading energy management company is seeking a Deputy General Manager - Product Security to lead security initiatives and ensure cybersecurity compliance. The ideal candidate should have over 12 years of experience in product security, with expertise in IEC 62443 standards and a strong background in secure development practices. This role involves advising product teams, managing security programs, and conducting training to enhance security awareness. If you are passionate about cybersecurity and leading initiatives, this is a great opportunity.

Qualifications

• 12–15 years total experience in engineering/product organizations.
• 8+ years in Product Security / Cloud Security.
• Minimum 5+ years hands-on experience with IEC 62443-based product security.

Responsabilités

• Lead and drive Security by Design and Shift-Left Security initiatives.
• Ensure adherence to IEC 62443 standards.
• Conduct cybersecurity training sessions and workshops.

Connaissances

Product Security

Cloud Security

Cybersecurity Maturity Models

Secure Development Lifecycle

Threat Modeling

Formation

Bachelor's or Master's degree in Computer Science, IT, or related field

Outils

IEC 62443

CISSP

CISM

Description du poste

Job Description

Position: Deputy General Manager – Product Security (Security Advisor)

Location: Navi Mumbai (Mahape)

Experience: 12–15 Years

Qualification: B.E. / B.Tech / M.E. / M.Tech (Computer Science / IT / related discipline)

Role Overview: Lauritz Knudsen Electrical & Automation is seeking an experienced Product Security Advisor to lead and drive Security by Design and Shift-Left Security initiatives across connected products and platforms. This role is responsible for adoption, governance, and execution of Secure Development Lifecycle (SDL) practices in line with IEC 62443-4-1, advising R&D and product teams on cybersecurity architecture, secure implementation, and regulatory compliance. The role combines deep technical expertise, process ownership, and assertive stakeholder engagement, ensuring cybersecurity requirements are embedded from early design through product release.

Key Responsibilities

• Product & Secure Development Lifecycle Leadership
• Act as Subject Matter Expert (SME) to ensure cybersecurity is prioritized and embedded in offer/product development from concept and design phase onward.
• Drive implementation of Secure Development Lifecycle (SDL) practices aligned with IEC 62443-4-1, including:
  • Threat modeling
  • Secure design and architecture
  • Secure coding practices
  • Security testing and validation
• Support development teams in risk-driven cybersecurity decision-making throughout the product lifecycle.
• Security Governance & Compliance
• Ensure adherence to IEC 62443 standards, including exposure to:
  • IEC 62443-4-2 (Product Security Requirements)
  • IEC 62443-3-3 (System Security Requirements)
• Support internal SDL audits, cybersecurity reviews, and regulatory compliance activities.
• Advise on regulatory, data protection, and privacy requirements for connected products and cloud-based offers.
• Represent product development teams in Business Unit, PSO, and corporate cybersecurity forums.
• Technical Advisory & Risk Management
• Provide expert guidance on:
  • Threat modeling (STRIDE and equivalent frameworks)
  • Risk analysis and CVSS scoring
  • Vulnerability triage, remediation, and closure
• Support teams in maintaining secure software environments, including:
  • Secure coding
  • Static code analysis
  • Software Composition Analysis (SCA)
  • Software Bill of Materials (SBOM)
• Advise on DevSecOps practices and secure CI/CD pipelines.
• Metrics, Maturity & Continuous Improvement
• Define and collect SDL and cybersecurity metrics to support data-driven security strategies.
• Monitor and improve organizational maturity using Cybersecurity Maturity Frameworks.
• Track SDL effectiveness, risk posture, and security KPIs and report to R&D leadership.
• Training, Awareness & Community Engagement
• Conduct cybersecurity training sessions, workshops, and awareness programs for development and architecture teams.
• Actively participate in internal and external cybersecurity communities and stay updated on emerging threats, standards, and regulations.
• Continuously update leadership on relevant cybersecurity trends, policies, and legislative changes.

Key Technical & Functional Competencies

• Strong expertise in Product Security and Cloud Security
• In-depth understanding of OT & IoT technologies, protocols, and architectures
• Hands‑on experience with:
  • Secure Development Lifecycle (IEC 62443-4-1 or equivalent)
  • Threat modeling and security testing
  • Secure design and secure coding
  • Vulnerability management and risk-driven security
• Strong knowledge of:
  • IEC 62443, NIST frameworks
  • Data protection, privacy screening, and data security
  • Cybersecurity maturity models and governance frameworks

Experience & Qualifications

• Bachelor’s or Master’s degree in Computer Science, IT, or related field
• 12–15 years total experience in engineering/product organizations
• 8+ years in Product Security / Cloud Security
• Minimum 5+ years hands‑on experience with IEC 62443‑based product security
• Exposure to IEC 62443 certification activities (4‑2 and 3‑3)
• Certifications such as CISSP, CISM, Azure Security certifications are highly desirable
• Preferred Industry Experience:
  • Power Distribution
  • Energy Management
  • Water & Utilities
  • Oil & Gas
  • Industrial Automation / OT environments

Schneider Electric is an Equal Opportunity Employer. It is our policy to provide equal employment and advancement opportunities in the areas of recruiting, hiring, training, transferring, and promoting all qualified individuals regardless of race, religion, color, gender, disability, national origin, ancestry, age, military status, sexual orientation, marital status, or any other legally protected characteristic or conduct.