Product Security Compliance Lead, Industrial IoT

A lead role in product cyber security governance for a global industrial automation group, strengthening the security of its Industrial IoT portfolio. You lead and develop the EU-wide governance framework for product security across its measurement business, making sure cyber security regulation and standards are applied consistently across the EU product organisations.

The role

• Leading the EU governance framework for product security, and continuously improving risk and compliance processes.
• Translating EU regulation and standards, NIS2, the Cyber Resilience Act, IEC 62443, ISO/IEC 27001 and the relevant ETSI and CENELEC frameworks, into internal governance, policies and decision criteria.
• Supporting risk-based decisions through defined assessment methods, escalation models and management reporting.
• Supporting audits and regulatory assessments by defining evidence, consistency and traceability requirements.
• Writing governance documentation and policy material, and bringing internal and external stakeholders with you.

What is needed

• A bachelor's degree in cyber security, computer science, electrical or systems engineering, or a related field.
• At least four years in product security, secure product development or cyber security compliance, ideally in an industrial or embedded environment.
• Familiarity with cyber security frameworks, standards and regulation.

Eight or more years including cyber security law and GRC roles, threat modelling and vulnerability testing, embedded design experience, an understanding of network architecture, and certifications such as CISM, CISSP, CISA or CRISC are an advantage.