Schneider Electric is searching for a Cybersecurity Officer for Sustainability Business within its Energy Management Business reporting to the Senior Vice President of the Sustainability Business Division and dotted line to the Group CISO.

The Cybersecurity Officer for Sustainability Business mandate is a focus on cyber, data, and product security risk management while building trust with customers, the ecosystem, and authorities. The CSO will set the vision and strategy that addresses the risks and simultaneously enables the Energy Management business objectives. This role is the liaison between the cybersecurity and business organizations, making cybersecurity a known element foundational to the success of digital and sustainability initiatives.

• Lessons learned and multi-year improvement plan after Ransomware Incident
• Restore Trust with Customers and Authorities
• CRA and regulations compliance for SaaS offers
• Alignment / integration of cybersecurity Processes & Tools with the rest of SE
• Resource Advisor - cyber strategy - frame agreement & trusted architecture
• Secure Data - customer / employee - architecture and regional operations
• SOC2 / Type2 + Certifications for MSSP
• Cybersecurity posture for integrated entities - Eco Act, ...
• ESG and Strat Accounts Cyber Awareness + agenda

• Define and execute on cyber, data and product security strategy and vision for the
• Division by keeping alignment on group cyber ambitions and priorities.
• Drive discussions with key strategic accounts on cyber, data and product security topics for the Division, addressing customer expectations/requirements.
• Raise situational awareness in the Division and its segments on various cyber trends, controversies, regulatory and authorities' requirements and competition moves.
• Identify critical partner and supplier dependencies and their impact for the Division.
• Conduct risk management activities in cyber, data, products, and systems from identification, assessment to mitigation of those risks (centered on group cyber risk register)
• Deploy product security essentials (baseline requirements) in the Division's R&D activities, deploy technical invariants for products, enforce independent pen-testing
• Drive regulatory compliance (e.g., CRA) by raising awareness at the leadership level toinfluence product (R&D) investment plans.
• Implement a robust control environment in the Division through Enterprise Risk
• Management and Key Internal Controls for Product development and R&D representing the Division as first line of defense.
• Articulate and deploy data protection requirements for offers within the division and address data privacy, residency/localization expectations from customers and authorities.
• Elevate the bar for Secure Development Lifecycle program and systematically conduct
• Formal Cybersecurity Reviews, manage the exception/waiver process before Go-to-Market.
• Lead product/offer Vulnerability & Controversies Management for the division and articulate the risk profile for vulnerabilities, articulating the business impact for the Division.
• Lead Digital Offer and Digital Footprint security management for the division including mobile apps governance (when relevant) including flags, and the migration to Azure Landing zone
• Spearhead Product Security Maturity Model Implementation for the division and conduct associated actions plans.
• Support to group strategic initiative like "Sensitive offers Source Code", Divisions "R&D site protection", "Platinum" sites protection programs.
• Drive Ecosystem security and Trust Standards in Energy Management scope entities of non- integrated companies, ramping up their security posture
• Engage in cyber incident management related to the Division from detection, thru containment up to root cause analysis and lessons learnt.
• Industry involvement and influencing, external engagements, make Division cyber known internally and externally.

• Superior organizational intelligence within the company and its ecosystem
• Effective communication skills, multi-tasking and problem-solving
• Ability to influence and engage successfully with senior business & cyber leaders.
• Ability to work in a matrix organization with collaboration and conflict management skills.
• Experienced in large business transformation programs.
• Tight deadlines, ability to prioritize, to manage and to maintain confidential information.

• Strong business acumen, experience in product security, in an energy management or related industry
• Experience with risk assessment, threat modeling, and security requirements definition
• Knowledge of security standards (IEC 62443, ISO27001, GDPR etc.) and their application to product, offer and wider digital security
• Strong understanding of security principles, protocols, and technologies.
• Relevant certifications such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) would be a plus.
• Academic degree in Business and/or Engineering: domain level expertise could be a strong plus: Product, Software development, Marketing, Tendering, Sales...