SDLC Security & Compliance Lead — Hybrid/Remote

OpenKrill; United States; Hybrid; USD 140.000 - 190.000; Vollzeit

Benefits dieser Stelle

Health insurance

Paid time off

401k with match

On-site amenities

Nature views

Zusammenfassung

Inductive Automation is seeking a Software Security and Compliance Lead to define, refine, and document SDLC standards to meet IEC 62443-4-1 and related regulatory obligations. The role arches the standards with practice, owns the software engineering process documentation, and drives audit readiness and evidence collection across ISO 9001, ISO 27001, and CRA conformity efforts.

The position emphasizes non-technical delivery of compliance processes, incident management, and coordination with

Qualifikationen

• Bachelor’s degree in CS, engineering, software or cybersecurity.
• Master’s degree or equivalent experience.
• Cybersecurity certification (CISSP, GICSP, or ISA/IEC 62443) required.
• 8+ years of experience; 15+ preferred.
• Experience with policy and process documentation.
• Audit experience in regulated environments.
• Strong communication with executive leadership.

Aufgaben

• Lead IEC 62443 certifications; bridge gaps between standard and practice.
• Monitor compliance drift and coordinate corrective actions.
• Maintain SDLC process documents and auditable evidence.
• Coordinate third-party testing and vulnerability disclosures.
• Support CRA and ISO conformity audits.
• Align security roadmap with product-level requirements.
• Train engineering staff on compliance processes.

Kenntnisse

Policy documentation

Audit experience

Executive communication

Incident management

Agile method

Ausbildung

Technical Bachelor’s Degree

Master’s Degree

Jobbeschreibung

Inductive Automation is seeking a Software Security and Compliance Lead to define, refine, and document SDLC standards to meet IEC 62443-4-1 and related regulatory obligations. The role arches the standards with practice, owns the software engineering process documentation, and drives audit readiness and evidence collection across ISO 9001, ISO 27001, and CRA conformity efforts.

The position emphasizes non-technical delivery of compliance processes, incident management, and coordination with