009IF8-Product Security Expert
Summary
Product Security Expert at Schneider Electric in Shanghai: identify and mitigate product security risks, ensure compliance with local cyber/data-protection laws, and drive Secure Development Lifecycle (SDL) rollout across China R&D and BU projects. Requires 5+ years in product security, SDL standards (IEC 62443-4-1/ISO 21434), embedded and cloud security, plus coding skills.
1. Identify, assess the product security related risk and drive the risk mitigate
2. Monitor product security related compliance to local Laws/Regulations/National Standards，and convert local cyber、data protection & privacy demand into product requirement, guarantee compliance
3. Act as relay among Product Security stakeholders, communicate, coordinate, facilitate and support BU CSOs, Product Owners, Security Data Privacy Advisors, R&D for FCSR, SDL and other product security initiatives & topics
4. Act as local owner & coordinator to handle severe product security issues
5. Drive the SDL deployment in China C4C offer creation projects
6. Monitor local SDL maturity and drive action plan to improve
1. Bachelor's or higher degree in Computer Science, Software Engineering, Electronic Information Engineering or Cybersecurity;
2. At least 5+ years of hands-on experience in a similar role;
3. Proven experience of working in an Engineering/R&D department following a Secure Development Lifecycle based on standards such as IEC 62443-4-1, ISO 21434, or Microsoft SDL with a proven ability to engage with management and development teams;
4. Demonstrated project management, communication and teamwork skills, including the ability to write concise reports, summaries, and presentations;
5. Familiar with embedded device security, experience in OT device/system is plus
6. Familiar with at least one programming language (Python, C/C+, Golang, Java, JS, etc.) and able to solve security problems with code;
7. Proven experience in cloud security, with certification in cloud security (e.g., CCSK, CCSP) preferred;
8. Holds cybersecurity certifications preferred, such as CISSP, CSSLP; and/or ISA / IEC 62443 Expert;
9. Knowledge of AI security, cloud-native security, mobile (Android, IOS) security;
10. Workable English is mandatory;
