Agt Industrial Cybersecurity Officer (Icso)

Siemens Energy; Xico; Presencial; MXN 900.000 - 1.200.000; Jornada completa

Descripción de la vacante

Siemens Energy is creating a role to enhance the cybersecurity resilience of the AGT product portfolio, appointing an Expert Professional (P5) to establish and drive cybersecurity strategy across the entire lifecycle. The role focuses on strategy & governance, SDL/DevSecOps, and risk-based security assurance, requiring extensive OT SDL experience and cross-functional influence.

The position reports to Industrial Cybersecurity offerings and involves collaboration with engineering, product

Formación

• 8+ years in industrial/OT cybersecurity roles.
• Experience with Secure Development Lifecycle (SDL/DevSecOps) in OT environments.
• Knowledge of IEC 62443 and ISO 27001 within product organizations.
• Ability to influence cross-functional teams.

Responsabilidades

• Develop and maintain a comprehensive cybersecurity strategy for the AGT product portfolio.
• Embed SDL/DevSecOps into engineering, quality, and release processes to ensure security-by-design.
• Lead TRAs and security concept reviews for new and modified products and solutions.
• Build and coordinate a network of cybersecurity experts and ambassadors across engineering, product management, and service departments.
• Run community enablement initiatives, including coaching, training, and awareness campaigns for distributed teams.

Conocimientos

Industrial cybersecurity & OT

TRA

Vulnerability management

ICS/OT architecture

IEC 62443

Network security

Program management

Strategic thinking

Influencing

Collaboration

Community enablement

Analytical skills

Data-driven decision making

Educación

Bachelor’s or Master’s in IT / Cybersecurity / Engineering / CS

8+ years in industrial/OT cybersecurity

IEC 62443 / ISO 27001 knowledge

Herramientas

DevSecOps tooling

SBOM tooling

Threat modeling tools

Descripción del empleo

This role is being created to enhance the cybersecurity resilience of the Aeroderivative Gas Turbines (AGT) product portfolio, ensuring business continuity. As an Expert Professional (P5) within the Product Lifecycle's Service and New Unit, the Industrial Cybersecurity Officer will establish and drive cybersecurity strategy across the entire product lifecycle. To achieve this, the position will focus on three core areas: Cybersecurity Strategy & Governance, Secure Product Lifecycle Management, and Technical Security Assurance. These pillars encompass developing strategic roadmaps, embedding security-by-design principles into development processes, and executing technical risk assessments and vulnerability management. Given the focus on industrial systems, the ideal candidate will possess extensive experience with Secure Development Lifecycles (SDL) in OT environments, deep knowledge of standards like IEC 62443, and proven expertise in threat modeling and program management. A technical degree and the ability to influence cross-functional teams are essential for success.

What You Need To Make a Difference

• 40% Cybersecurity Strategy & Governance
  • Develop and maintain a comprehensive cybersecurity strategy for the AGT product portfolio, covering products, solutions, and services.
  • Drive the implementation of the AGT cybersecurity roadmap to continuously improve process, tooling, and competency maturity.
  • Define, measure, and report on cybersecurity Key Performance Indicators (KPIs) to management, preparing for regular performance reviews.
  • Monitor and translate market trends, customer specifications, and regulatory requirements (e.g., IEC 62443) into actionable product requirements.
  • Represent the AGT business in internal Siemens Energy cybersecurity forums and support external audits and customer assessments.
• 30% Secure Product Lifecycle Management
  • Embed Secure Development Lifecycle (SDL/DevSecOps) requirements into engineering, quality, and release processes to ensure security-by-design.
  • Establish and oversee a comprehensive vulnerability management program for the portfolio, including SBOM management, disclosure handling, and remediation tracking.
  • Consult on the nomination and approval of Industrial Cybersecurity Experts, providing technical guidance and escalation support.
• 30% Technical Security Assurance & Community Enablement
  • Lead Threat & Risk Assessments (TRAs) and security concept reviews for new and modified products and solutions, supporting risk acceptance decisions.
  • Build and coordinate a network of cybersecurity experts and ambassadors across engineering, product management, and service departments.
  • Run community enablement initiatives, including coaching, training, and awareness campaigns for distributed teams.

Certifications

• Certified Information Systems Security Professional (CISSP)
• Global Industrial Cyber Security Professional (GICSP)
• IEC 62443 Cybersecurity Expert/Specialist

Education

• Bachelor's or Master's degree in Information Technology, Cybersecurity, Electrical/Automation Engineering, Computer Science, or a comparable technical field.
• Extensive professional experience (typically 8+ years) in industrial/OT cybersecurity roles, with a focus on secure product development in embedded or industrial environments.
• Proven experience implementing and interpreting standards such as IEC 62443 and/or ISO 27001 within product organizations.

Skills

• Industrial Cybersecurity & OT Knowledge
  • Secure Development Lifecycle (SDL/DevSecOps)
  • Threat & Risk Assessment (TRA)
  • Vulnerability Management (CVSS, SBOMs)
  • Industrial Control Systems (ICS) / OT Architecture
  • Industrial Cybersecurity Standards (IEC 62443, ISO 27001)
  • Network Security Controls (Segmentation, Hardening)
• Program & Stakeholder Management
  • Program Management
  • Strategic Thinking
  • Influencing Skills
  • Collaboration
  • Community Enablement & Coaching
• Technical & Analytical Abilities
  • Analytical Skills
  • Data-Driven Decision Making

AGT Industrial Cybersecurity officer (ICSO) Mexico City, Ciudad de Mexico, Mexico