Product & Solution Security Officer "PSSO"

duct & solution security

• Advises executive management, product management, project management, R&D heads and manufacturing heads regarding security for all Siemens

• In cooperation with the CEO of the Business Unit and the Chief PSSO of the Division she/he advises appropriate processes and structures to

• In particular, is responsible for driving the security strategy, aligned with the Division Security Strategy.

• Reports to the Chief PSSO and to the CEO of the Business Unit.

• The role of the Product & Solution Security Officer may also be defined for a large site or a region.

Additional Specifications:

• The Product & Solution Security Officer has the responsibility to actively drive product & solution security.

• Advises executive management, product management, project management, R&D heads and manufacturing heads with regard to security

• In cooperation with the CEO of the Business Unit and the Chief PSSO of the Division she / he advises appropriate processes and structures to introduce

• In particular, is responsible for driving the PSS strategy, aligned with the Division PSS Strategy.

• The role of the Product & Solution Security Officer may also be defined for a large site or a region.

Define Regulations & Support Implementation:

• Advise executive management and product management with regard to security for Siemen's products, solutions and services.

• Drive the definition of an individual PSS strategy (e.g. including KPIs, decision regarding security service business) and implementation policy for Based on individual implementation policy of the BU/site/region steer a process improvement program to establish and maintain appropriate processes (e.g. integrate threat & risk analysis, security requirements engineering, secure architecture

• Ensure organizational preparedness for product & solution security of BU/site/region (e.g. trainings, roles & responsibilities).

• Implement and manage incident & vulnerability handling activities and process. Drive classification of vulnerabilities & incidents and perform final

• Implement supplier qualification and certification program.

Guide Technological Aspects:

• Ensure that relevant stakeholders have sufficient awareness for product and solution security.

• Ensure that stakeholders own required know-how about product and solution security.

• Coordinate relevant standardization and regulation for product and solution security and required certifications of products, solutions, processes

• Coordinate and steer technical direction for product and solution security mechanisms in coordination with product & solution security expert in the

• Coordination of product & solution security topics with legal, import and export.

• Help develop, implement and manage processes, internal controls relating to privacy frameworks and offer privacy support to various departments.

• Collaborate with compliance and security professionals on projects related to compliance with global data protection and privacy laws.

Support Communication:

• Represent the BU/site/region in all product & solution security matters.

• Establish an internal network and maintain internal PSS community.

• Ensure a coordinated communication of marketing and sales in line with Corporate Communication and Chief PSSO.

• Establish network to dedicated external partners aligned with Chief PSSO.

• Synchronize adequately with BU/site/region's Information Security organization to ensure that IT infrastructure (e.g. Development suite, sources, Measure & Report:

• Track the status of adherence and application of product and solution security standards, processes and policies as well as the implementation policy of the BU/site/region.

• Together with relevant stakeholders (e.g. CEO, Chief PSSO, project head), decide how to handle escalated security risks in products and solutions and • Report to CEO and Chief Product & Solution Security Officer; escalate/inform in case of emergencies; synchronize with other Product & Solution Qualified Applicants must be legally authorized for employment in the United States.

Required Skills, Education & Training Experience:

• Degree in computer science, IT security, electronics or related fields

• Certification program Certified Information Systems Security Professional (CISSP) and Certified Secure Software Lifecycle Professional (Knowledge acquired min. 5 years in his / her product, solution or service and customer world. (Preferred)

• Experience with process improvement projects, change management.

• Basic and broad experience in security. Being able to estimate security threats and risks.

• Competency to mediate between executive management and technical staff.

• Ability to work in matrix-organization

• Experienced with leading without disciplinary power scenarios.

• Proven technical management experience.

• Ability to analyze and evaluate security impacts on divisional mid-term strategy.

Why us?

Working at Siemens Software means flexibility - Choosing between working at home and the office at other times is the norm here. We offer great benefits and rewards, as you'd expect from a world leader in industrial software.

Siemens Industry Software is an equal opportunities employer and does not discriminate unlawfully on the grounds of age, disability, gender assignment, marriage, and civil partnership, pregnancy and maternity, race, religion or belief, sex, sexual orientation, or trade union membership.

If you want to make a difference - make it with us!

#LI-HYBRID

#SWSaaS

#LI-PLM