Global Product Cyber Security Expert – R&D Digital Portfolio

Stellenbeschreibung:

Define, govern, and assure cybersecurity-by-design across global R&D product development
Safeguard digital on-premises, edge, and cloud products for ABB Digital Energy Management and Autonomous Operations
Act as the global cybersecurity reference for the product portfolio
Embed security requirements into product architectures, software, and secure product development lifecycle processes
Challenge designs and approve security readiness
Develop and implement cybersecurity strategies, policies, and procedures
Conduct security assessments and audits to identify vulnerabilities and risks
Respond to security incidents and implement proactive mitigation measures
Implement access controls, encryption, and other security measures
Conduct risk assessments and develop mitigation strategies for regulatory and industry compliance
Collaborate with internal teams and external auditors on compliance findings, incidents, corrective actions, and disaster recovery planning
Contribute to software development lifecycle activities within assigned areas
Follow agile, scrum-based software development practices
Incorporate cybersecurity controls and security testing into CI/CD pipelines and DevSecOps practices
Collaborate with product owners, software developers, architects, and testers across a global team
Stay current with software engineering technologies and share knowledge with team members
Travel occasionally for office or site visits

Requirements

Master's degree in computer science with a focus on IT security
10 years of proven experience in product or system cybersecurity for industrial or critical systems
5 years of experience in cloud computing
Strong understanding of cybersecurity principles, technologies, and best practices
Hands-on experience with AWS, Azure, or Google Cloud
Proficiency in cloud services and management tools
Familiarity with Azure DevOps for CI/CD pipelines
Strong experience with Kubernetes, Docker, and Podman
Proficiency in OAuth 2.0, OpenID Connect (OIDC), and identity management solutions such as Keycloak
Experience with Helm charts
Strong understanding of microservices design and architecture, including loose coupling, bounded contexts, and domain-driven design
Knowledge of IEC 62443, GDPR, NIS2, ISO/IEC 27001, and IEC 62443 SL3
Project management capabilities
Knowledge of Scrum and Agile methodologies
Strong analytical and problem-solving skills
Ability to work independently and prioritize tasks in a fast-paced environment
Excellent communication and collaboration skills
Effective verbal and written communication skills in English; German is eventually required if the location is Germany
Willingness to travel occasionally for office or site visits
PhD with a cybersecurity focus is a plus
Advanced degrees or certifications such as CISSP, CISM, or CCSP are preferred

Core Competencies

Demonstrates expertise in cybersecurity principles and practices, with a strong focus on product development and compliance in industrial systems. Proficient in cloud computing, security assessments, and implementing cybersecurity strategies across global teams.