Job Description

Description - ExternalAbout Schneider ElectricSchneider Electrics purpose is to empower all to make the most of our energy and resources, bridging progress and sustainability for all. We call this Life Is On.Our mission is to be your digital partner for Sustainability and Efficiency.We drive digital transformation by integrating world-leading process and energy technologies, end-point to cloud connecting products, controls, software and services, across the entire lifecycle, enabling integrated company management, for homes, buildings, data centers, infrastructure and industries.We are the most local of global companies. We are advocates of open standards and partnership ecosystems that are passionate about our shared Meaningful Purpose, Inclusive and Empowered values.Job purpose:Schneider Electric is searching for a CERT Leader for assignment in our Energy Management Business.In this role you will work in close collaboration with Lines of Business (LoBs) in your organization, the Corporate CERT (CP-CERT) organization, and other Schneider Electric business units. You will coordinate all customer and product-related Cyber Security vulnerabilities as a product vulnerability management expert and leader and support incident response cases that may involve offers from your organization.The CERT Leader regularly interacts with key stakeholders such as product LoB vulnerability handlers and representatives from offer development, regulations, conformity teams and technical leaders as well as stakeholders from the CP-CERT and other Governance teams to ensure that product cybersecurity vulnerability management guidelines and processes are executed in an efficient, effective, and compliant manner.The ideal candidate will be able to combine process and understanding of product vulnerabilities with assertive engagement and escalation when appropriate. The idea is not only to have people only addressing our product vulnerabilities, but also acting like owners and having an impact in our strategy for security by design.Responsibilities:\xc2\xb7 Responsible for driving Product Vulnerability Management process execution in your organization whether externally reported or internally discovered (Intake, Triage, Planning, Execution, Customer Notification, lessons learned, etc.\xc2\xb7 Work with product vulnerability handlers to facilitate appropriate response to reported product vulnerabilities for resolution within the specified SLAs. Escalate if there are issues\xc2\xb7 Coordinate regular meetings with product vulnerability handlers in all supported lines of business\xc2\xb7 Collaborate with the corporate CERT (CP-CERT) team on product vulnerability reporting, challenges, and areas of improvement, etc.\xc2\xb7 Collaborate with the corporate CERT (CP-CERT) team by advocating BU needs in policies, procedures and new process development\xc2\xb7 Responsible for continuous improvement of the related processes\xc2\xb7 Train the Cybersecurity people and Offer Managers in your organization on the Product Vulnerability Management processes and policies, and keep them up to date on any updates\xc2\xb7 Assist product vulnerability handlers in your organization with writing security notifications\xc2\xb7 Manage the Product Security Notification process for patch Tuesday monthly releases\xc2\xb7 Support incident response process when offers from your organization are involved\xc2\xb7 Monitor threat intel feeds and security blogs for items that may be relevant to offers from your organization\xc2\xb7 Work with assigned LoBs, CP-CERT, external communications team, and legal in responding to controversial situations involving assigned offersQualificationsQualifications - ExternalKey Skills and Requirements\xc2\xb7 5+ years Cybersecurity experience\xc2\xb7 Proven Cybersecurity skills and experience in leading projects independently\xc2\xb7 Extensive understanding of triaging and assessing risks associated with product cybersecurity vulnerabilities in Critical Infrastructure products\xc2\xb7 Qualifications/Certifications in Cybersecurity (CEH, CSSLP, CISSP etc.)\xc2\xb7 Well versed in scoring vulnerabilities with CVSS, strong understanding of how to apply or reference CVE, CWE, NVD informationQualifications and Expertise\xc2\xb7 Leadership ability and a good team player and team lead experience\xc2\xb7 Ability to work with autonomy\xc2\xb7 Ability to organize and facilitate meetings and workshops\xc2\xb7 Demonstrated ability to stay focused\xc2\xb7 Ability to conform to shifting priorities, demands and timelines through analytical and problem-solving capabilities\xc2\xb7 Experience & understanding of the complexity of co-working in a global project team\xc2\xb7 Good understanding and experience of best practices of end-2-end secure development lifecycle for products and systems\xc2\xb7 Good understanding and experience of key topics in Cybersecurity as Product Vulnerability Management, Risk Management, Incident Response, Penetration Testing, Quality assurance\xc2\xb7 Good understanding of the differences and challenges of the convergence of OT and IT worlds\xc2\xb7 Strong interpersonal and intercultural skills\xc2\xb7 Excellent presentation and communications skills, both written and oral\xc2\xb7 High level of energy and passion\xc2\xb7 Standing Certification in Cybersecurity Management such as CISSP, CSSLP; and/or IEC 62443 Certified Specialist preferred\xc2\xb7 Languages: good level English is mandatory, proficieny in one or more other languages, e.g., French, is preferredDirect reportsThis role will not have direct reports but will have a transversal, organization wide stakeholder management.

Schneider Electric