Cyber Security Architect - Senior Professional
Schneider Electric
Mumbai, IndiaPosted 2 days agoDiscoveredMatch locked
5+ years expSoftware Engineering
Position
Deputy General Manager - Product Security (Security Advisor)
Location
: Navi Mumbai (Mahape) Experience: 12-15 Years Qualification: B.E. / B.Tech / M.E. / M.Tech (Computer Science / IT / related discipline)
Role Overview
Lauritz Knudsen Electrical & Automation is seeking an experienced Product Security Advisor to lead and drive Security by Design and Shift-Left Security initiatives across connected products and platforms. This role is responsible for adoption, governance, and execution of Secure Development Lifecycle (SDL) practices in line with IEC 62443-4-1, advising R&D and product teams on cybersecurity architecture, secure implementation, and regulatory compliance.
The role combines deep technical expertise, process ownership, and assertive stakeholder engagement, ensuring cybersecurity requirements are embedded from early design through product release.
Key Responsibilities
- Product & Secure Development Lifecycle Leadership
- Act as Subject Matter Expert (SME) to ensure cybersecurity is prioritized and embedded in offer/product development from concept and design phase onward.
- Drive implementation of Secure Development Lifecycle (SDL) practices aligned with IEC 62443-4-1, including:
o Threat modeling o Secure design and architecture o Secure coding practices o Security testing and validation
- Support development teams in risk-driven cybersecurity decision-making throughout the product lifecycle.
- Security Governance & Compliance
- Ensure adherence to IEC 62443 standards, including exposure to:
o IEC 62443-4-2 (Product Security Requirements) o IEC 62443-3-3 (System Security Requirements)
- Support internal SDL audits, cybersecurity reviews, and regulatory compliance activities.
General
- Advise on regulatory, data protection, and privacy requirements for connected products and cloud-based offers.
- Represent product development teams in Business Unit, PSO, and corporate cybersecurity forums.
- Technical Advisory & Risk Management
- Provide expert guidance on:
o Threat modeling (STRIDE and equivalent frameworks) o Risk analysis and CVSS scoring o Vulnerability triage, remediation, and closure
- Support teams in maintaining secure software environments, including:
oSecure coding o Static code analysis o Software Composition Analysis (SCA) o Software Bill of Materials (SBOM)
- Advise on DevSecOps practices and secure CI/CD pipelines. Metrics, Maturity & Continuous Improvement
- Define and collect SDL and cybersecurity metrics to support data-driven security strategies.
- Monitor and improve organizational maturity using Cybersecurity Maturity Frameworks.
- Track SDL effectiveness, risk posture, and security KPIs and report to R&D leadership.
Training, Awareness & Community Engagement
- Conduct cybersecurity training sessions, workshops, and awareness programs for development and architecture teams.
- Actively participate in internal and external cybersecurity communities and stay updated on emerging threats, standards, and regulations.
- Continuously update leadership on relevant cybersecurity trends, policies, and legislative changes.
Key Technical & Functional Competencies
Strong expertise in Product Security and Cloud Security
In-depth understanding of OT & IoT technologies, protocols, and architectures
Hands-on experience with:
o Secure Development Lifecycle (IEC 62443-4-1 or equivalent)
o Threat modeling and security testing
o Secure design and secure coding
o Vulnerability management and risk-driven security
Strong knowledge of:
o IEC 62443, NIST frameworks
o Data protection, privacy screening, and data security
o Cybersecurity maturity models and governance frameworks
Experience & Qualifications
Bachelor's or Master's degree in Computer Science, IT, or related field
12-15 years total experience in engineering/product organizations
8+ years in Product Security / Cloud Security
Minimum 5+ years hands-on experience with IEC 62443-based product security
Exposure to IEC 62443 certification activities (4-2 and 3-3)
Certifications such as CISSP, CISM, Azure Security certifications are highly desirable
Preferred Industry Experience
Power Distribution
Energy Management
Water & Utilities
Oil & Gas
Industrial Automation / OT environments
Looking to make an IMPACT with your career?
When you are thinking about joining a new team, culture matters. At Schneider Electric, our values and behaviors are the foundation for creating a great culture to support business success. We believe that our IMPACT values - Inclusion, Mastery, Purpose, Action, Curiosity, Teamwork - starts with us.
IMPACT is also your invitation to join Schneider Electric where you can contribute to turning sustainability ambition into actions, no matter what role you play. It is a call to connect your career with the ambition of achieving a more resilient, efficient, and sustainable world.
We are looking for IMPACT Makers; exceptional people who turn sustainability ambitions into actions at the intersection of automation, electrification, and digitization. We celebrate IMPACT Makers and believe everyone has the potential to be one.
Become an IMPACT Maker with Schneider Electric - apply today!
€40 billion global revenue
+9% organic growth
150 000+ employees in 100+ countries
You must submit an online application to be considered for any position with us. This position will be posted until filled.
Schneider Electric aspires to be the most inclusive and caring company in the world, by providing equitable opportunities to everyone, everywhere, and ensuring all employees feel uniquely valued and safe to contribute their best. We mirror the diversity of the communities in which we operate, and 'inclusion' is one of our core values. We believe our differences make us stronger as a company and as individuals and we are committed to championing inclusivity in everything we do.
At Schneider Electric, we uphold the highest standards of ethics and compliance, and we believe that trust is a foundational value. Our Trust Charter is our Code of Conduct and demonstrates our commitment to ethics, safety, sustainability, quality and cybersecurity, underpinning every aspect of our business and our willingness to behave and respond respectfully and in good faith to all our stakeholders. You can find out more about our Trust Charter here
Schneider Electric is an Equal Opportunity Employer. It is our policy to provide equal employment and advancement opportunities in the areas of recruiting, hiring, training, transferring, and promoting all qualified individuals regardless of race, religion, color, gender, disability, national origin, ancestry, age, military status, sexual orientation, marital status, or any other legally protected characteristic or conduct.
Not included in the source posting: about the role, benefits.
Skills
cybersecurityazureci-cdcissp
Who can apply
The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.
Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.