Required Qualifications
· Bachelor’s degree in computer science, Information Security, or a related field.
· 4-6 years of experience in security management, with a focus on product security.
· Basic knowledge of security principles, GRC, general security, and data protection.
· Strong project management skills with experience leading cross-functional teams.
· Excellent communication skills, both written and verbal, with the ability to convey complex security concepts to non-technical stakeholders.
· Highly structured and detail-oriented with strong organizational skills.
· Proven ability to influence and advocate for security best practices within an organization.
· Knowledge of relevant security frameworks and standards (e.g., ISO/IEC 27001, NIST).
· Optional certifications such as CISSP, CISM, CISA, or similar.
Leadership and soft skills
· Comfortable presenting and collaborating transversally, in matrix organization
· Excellent written and verbal interpersonal skills
· Ability to organize and facilitate meetings and workshops
· Ability to conform to shifting priorities, demands and timelines through analytical and problem-solving capabilities
· Experience & understanding of the complexity of working in a global project team
· Ability to identify issues/risk, analyze and understand underlying causes and devise appropriate action plans
· Ability to work with maximum autonomy
· Ability to multi task, and to work under pressure
About our Company
Schneider Electric is the global specialist in energy management and automation. With revenues of ~€25 billion in FY2016, our 144,000+ employees serve customers in over 100 countries, helping them to manage their energy and process in ways that are safe, reliable, efficient and sustainable. From the simplest of switches to complex operational systems, our technology, software and services improve the way our customers manage and automate their operations. Our connected technologies reshape industries, transform cities and enrich lives.
At Schneider Electric, we call this Life Is On.
At Schneider Electric, Cybersecurity is not an afterthought. Its companywide Cyber-security posture, led by Schneider Digital, aims at securing the digital journey of Schneider, its partners, and its customers through:
This Cybersecurity posture fuels Schneider Electric innovation in IoT and enables the Company to advance IT/OT convergence and to ensure that Schneider, its partners, and customers can thrive in today’s digital economy.
Job purpose
We are looking for an experienced Cybersecurity Portfolio Manager to drive our product security agenda and efforts within Energy Management central CTO office.
This role is essential in conducting transversal security initiatives, defining common goals and metrics, connecting various dots, bridging the gap between regulatory, technical and business teams in the CTO Office and beyond well into Divisions, chapters, leagues etc. ensuring our products meet the highest security and data protection standards.
The ideal candidate will have a solid foundation in security principles (ideally both IT and OT), general governance risk and compliance (GRC), data protection and product security.
The role will report to the VP of Cybersecurity Innovation and Architecture within the EM CTO office and work closely with product security architects, security advisors and other stakeholders.
Key Responsibilities
· Engage in Product Security Management topic coordinating the security aspects of product development and implementation, ensuring alignment with industry standards and regulatory requirements.
· Organize governance, Risk, and Compliance (GRC) by ensure that all product security measures comply with relevant GRC frameworks and policies.
· Organize transversal project management leading security-related projects, ensuring timely delivery, resource management, and adherence to budgetary constraints.
· Organize stakeholder communication acting as a liaison between technical teams, certification/conformity teams, and other stakeholders to ensure clear communication and alignment on security objectives.
· Document and report\: dashboarding by maintaining comprehensive documentation of security processes, policies, and procedures, and prepare regular reports on security performance and compliance status.