Senior Cyber Security Architect

Actalent Services; Hyderabad, Pune District, Bengaluru; On-site; INR 1,800,000 - 2,600,000; Full time

Job summary

Emerson is seeking a product security professional to coordinate and advance secure development lifecycle efforts for Industrial Control Systems. You will drive security-focused audits, assess cyber deliverables, and serve as the product security representative on key projects.

You will inventory products with business units, organize risk assessments, manage vulnerabilities and threat modeling, and promote best practices across functions.

Qualifications

• Experience with secure development lifecycle concepts.
• Familiar with risk-based security practices.
• Knowledge of product security frameworks and standards.

Responsibilities

• Coordinate and manage the implementation of secure development lifecycle efforts.
• Drive new product development process audits and assessments for Cybersecurity deliverables.
• Participate in key projects as product security functional representative.
• Inventory products with business units and prioritize risk.
• Organize and manage product risk assessments, vulnerabilities management and threat modeling efforts.
• Promote secure development and product security best practices across teams.
• Maintain artifacts and a central repository for Emerson Product Security functions.
• Assist with analyzing product security market and technology trends.
• Assist with training and development needs for product security roles.
• Maintain familiarity with IEC 62443, IEC 27001, NIST SP 800-218, ISO/IEC standards.

Skills

Secure SDLC

Threat modeling

Risk assessment

Presentation skills

Collaboration

ICS/IoT knowledge

Education

Masters degree in electronics engineering

Job description

Role & responsibilities

• Coordinate and manage the implementation of secure development lifecycle efforts.
• Drive new product development process audits and assessments for Cybersecurity deliverables.
• Participate in key projects as product security functional representative.
• Work with business units to inventory products and assist in prioritizing risk.
• Organize and manage product risk assessments, vulnerabilities management and threat modeling efforts.
• Create, organize and participate in cross functional and business unit communities to promote the adoption of secure development and product security best practices.
• Maintain artifacts and a central repository of communications and information for Emerson Product Security functions and teams.
• Assist with analyzing product security market and technology trends.
• Assist with training and development needs for various organizational functions specific to product security related roles and functions.
• Maintain familiarity with industry standards such as IEC 62443 (ISA99), IEC 29147, IEC 30111, ISO/IEC 27001, EU-CRA and NIST SP 800-218.
• Support the organizational Product Security Incident Response Team and vulnerability management activities.
• Establish and enhance strong relationships with business unit team members, organizational functions, and business partners.

Preferred candidate profile

JOB DESCRIPTION

• Experience in industrial control systems (ICS), embedded systems, or network security is preferred.
• Familiar with concepts such as secure development lifecycle, secure by design, and defense in depth.
• Familiar with Microsoft Office tools for effective communications and information management.
• Ability to organize, prepare and make compelling presentations.
• Self-motivated and able to work under tight timeline.
• Strong problem solving / interaction management skills.
• Strong organizational and collaboration skills.

Preferred Qualifications that Set You Apart:

• Masters degree or equivalent experience in electronics engineering or related field.
• Risk Management Framework and Processes experience.
• Experience with standards and risk management frameworks (e.g. IEC 62443, IEC 27001, NIST SP 800-218, COBIT, NIST).
• Knowledge of technology trends and current product security issues, including those specific to control systems and related products.
• Experience with project management and development processes.
• Experience working with recognized security related standards and technologies.Experience with software bills of material (SBOM).
• Experience with secure coding practices and code review processes.
• Prior experience in the industrial/ factory automation or control systems industry.