Cyber Certification Manager
Job Description

The Cyber Certification Manager will work with the Global Cyber Certification Leader to embed cybersecurity and privacy controls into all the digital assets assigned

This includes the following:

• Handle cybersecurity and privacy (certification) engagements end to end for SE's digital assets (Software Applications, Technology Platforms, Schneider Electric Digital Offers, APIs) in the relevant region or assigned business domain.
• Cybersecurity and privacy engagements involve assisting project and product delivery teams in identifying IT security and data protection requirements and embedding the required controls into the digital asset.
• Prior to release or deployment of the product confirm if it is compliant with security requirements, or that sufficient compensating controls have been put in place to mitigate identified risks and thus achieve compliance.
• The engagements involve application security and privacy advisory services to products and software which are either developed in house or procured through third party vendors.
• Perform cloud security assessments for Third Party SaaS vendors through the CSA framework
• Conduct risk assessments and communicate the outcomes to IT and Business application owners.
• Understanding the general IT security policies of the company.
• Conduct awareness sessions and webinars for stakeholders in the respective geographies on cybersecurity and privacy requirements.
• Work closely with project delivery teams, perform everyday communications with project managers and technical specialists, introduce the certification engagements and ensure that the compliance is achieved before applications are put into production

• Project Management
• Advance Knowledge of Cybersecurity and Privacy Principles
• Leadership / Act like owners
• Collaboration/Teamwork
• Communications (Written and Oral)
• Requirements Gathering and Analysis
• Interpersonal Skills, proactiveness
• Willing to learn new skills / Learn Everyday

• Expertise in applying Information Security Management principles and standards in areas such as threats and vulnerabilities, risk assessment and mitigation, security policy and security management process
• Expertise in ensuring compliance with personal data protection legislation in EU and relevant regions.
• Understanding or experience on any of the following is an advantage:
  • Cloud Security Assessment and Security Audits of Cloud Environment
  • Vulnerability Management (Process, Tools and Metrics)
  • NIST Cybersecurity Framework
  • Critical Security Controls (CSC)
• Expertise in DevSecOps, OWASP and threat modeling methodologies is also an advantage.

• 5+ years experience in general IT management, security, and data protection.
• Some of the desired certifications (if not achieved, the role holder could aspire to achieve these as part of their development plans in this role)
  • CISSP (Certified Information Systems Security Professional)
  • CIPP (Certified Information Privacy Professional) (good to have)
  • CISM (Certified Information Security Manager)
  • CCSP (Certified Cloud Security Professional)
  • OSCP, CEH (Desirable)
  • Any other product specific security certification (e.g. Microsoft or AWS)