Chief Information Security Officer

Schneider Electric - Dallas, TX

Full-time - Executive

Dallas, TX

10,001+ employees

Electrical Equipment, Appliance, and Component Manufacturing

About the position

Schneider Electric's Digital Grid Business (DG) is seeking a highly motivated and organized individual to take on the global role of Chief Information Security Officer (CISO). This position is critical as it oversees the product vision, strategy, and roadmap for the entire DG portfolio, which provides enterprise software solutions and services to utilities for managing the lifecycle of the grid. The CISO will report directly to the CEO of Digital Grid and will lead the product management, product marketing, and product strategy teams. Collaboration within Digital Grid and across Schneider Electric and its Prosumer businesses is essential to ensure that DG's products align with market needs and the company's overarching goals. In addition to product oversight, the CISO will be responsible for the overall information security strategy of the organization, ensuring that security measures are in line with business objectives. This role involves identifying and mitigating cybersecurity risks, developing security policies and procedures, implementing security technologies, and educating employees on best practices. The CISO will frequently interface with senior management and external stakeholders to communicate the organization's security posture and address any security concerns that may arise. The CISO will also be tasked with developing and implementing the information security strategy for the Digital Grid business, ensuring that it aligns with business objectives. This includes overseeing the design and implementation of security protocols, policies, and procedures to protect the company's digital assets, leading a team of security professionals, and establishing resilient systems to ensure the uninterrupted operation of mission-critical software. Furthermore, the CISO will implement disaster recovery and business continuity plans, work closely with development teams to integrate security into the software development lifecycle, and ensure compliance with industry standards and regulations.

Responsibilities

• Develop and implement the information security strategy for the Digital Grid business, ensuring alignment with business objectives.
• Oversee the design and implementation of security protocols, policies, and procedures to protect the company's digital assets.
• Lead and manage a team of security professionals to ensure ongoing monitoring and protection of the company's networks, systems, and data.
• Establish and maintain highly resilient and secure systems to ensure uninterrupted operation of mission-critical software.
• Implement robust disaster recovery and business continuity plans to mitigate the impact of any security breaches or system failures.
• Work closely with development teams to integrate security measures into the software development lifecycle, ensuring that security is a fundamental consideration from design to deployment.
• Lead the assessment and management of security risks specific to the Digital Grid domain.
• Collaborate with cross-functional teams to integrate security best practices into the development and operation of digital grid solutions.
• Ensure compliance with industry standards, regulations, and internal security requirements.
• Drive security awareness and training initiatives tailored to the Digital Grid team.
• Act as the primary point of contact for security-related matters within the Digital Grid business.
• Stay abreast of emerging threats and technologies to proactively address security challenges.

Requirements

• Proven experience as a CISO or in a senior information security role, preferably within the energy distribution, DERMS or digital grid sector.
• Deep understanding of digital grid technologies, including IoT, cloud computing, and advanced distribution management systems.
• Strong knowledge of industry-specific regulations and standards (e.g., NIST, NERC CIP, GDPR, IEC 62443, CIS, CSA SOC 2 Type 2, ISO 27001, ISO 27701, CRA).
• Excellent leadership and communication skills to effectively engage and influence stakeholders at all levels.
• Relevant certifications such as CISSP, CISM, or CISA are highly desirable.
• Advanced Degree in engineering, cybersecurity, or computer information technology related domains.