Cyber Security Advisor

Andover, MA

Electrical Equipment, Appliance, and Component Manufacturing

About the position

The Cybersecurity Advisor supports the development of products and systems that are resilient against cyberattack. They manage risk and advise R&D teams. Digital Buildings is looking for a Cybersecurity Advisor to be part of the Global Cybersecurity Chapter.

Responsibilities

• Deploy Schneider's SDL (Secure Development Lifecycle)
• Act as an expert facilitator on practices such as secure design, threat modeling, and vulnerability management
• Act as a point of contact for cybersecurity issues for a portfolio of offers
• Support product owners in specifying security requirements and bring expert knowledge of relevant CS standards and regulations
• Identify and communicate cybersecurity risks
• Support product teams with security best practices for design, automation, and tool selection
• Evaluate threats and vulnerabilities on offers
• Lead and coordinate cybersecurity-related initiatives within the line of business
• Bring new approaches that make us more efficient and effective
• Support site, team, and offer cybersecurity certifications
• Form a network of experts inside and outside the line of business to engage as necessary on technical reviews, risk management and customer topics

Requirements

• Degree or similar experience in engineering, computer science, information systems, or equivalent experience
• Experience in embedded development and platform development
• Experience deploying secure development lifecycle practices to R&D teams
• Experience leading working groups and facilitating change
• Familiarity with data privacy concerns
• Experience with CI/CD and DevSecOps
• Demonstrated competence in vulnerability management and risk-based decision making
• Proficiency at communicating appropriately to different groups including customers and business stakeholders
• Technical background to understand PC, mobile, cloud, and embedded product architecture, communication protocols, and networking equipment

Nice-to-haves

• Able to operate cybersecurity-related tools
• Product and system cybersecurity architecture design and review experience
• CSSLP Certification for secure lifecycle
• Other cybersecurity technical and management certifications
• Experience in IEC-623433-4-X audits