Senior Engineer II, Cybersecurity and Data Protection Advisor

Cybersecurity & Data Protection AdvisorAt Schneider Electric, we empower all to make the most of our energy and resources, bridging progress and sustainability for all. We are seeking a Cybersecurity & Data Protection Advisor to join our IA Services & Advisory business and play a critical role in securing our digital ecosystem. This position offers an exciting opportunity to support Schneider Electric's digital transformation initiatives, including AI-powered solutions, Industrial IoT, Edge Computing, cloud-native technologies, and digital services. You will serve as a trusted cybersecurity advisor, partnering with product, engineering, and business teams to ensure security and privacy requirements are embedded throughout the lifecycle of our digital offerings. As a Cybersecurity & Data Protection Advisor, you will help strengthen the cybersecurity and data protection posture of digital assets, provide guidance on secure development practices, and support certification and compliance activities across globally distributed teams.What You Will DoCybersecurity & Data Protection AdvisoryLead cybersecurity and data protection engagements for Schneider Electric digital assets, including software applications, technology platforms, APIs, and digital offers.Partner with business, product, and engineering teams to identify cybersecurity and privacy requirements and implement appropriate controls.Conduct risk assessments and provide recommendations to mitigate identified risks.Review and evaluate security controls to ensure alignment with Schneider Electric cybersecurity and privacy standards.Support security certification and governance activities, ensuring required evidence and documentation are completed accurately and on time.Secure Development Lifecycle (SDL)Guide project and product teams through all phases of the Secure Development Lifecycle (SDL).Support cybersecurity requirements definition, risk assessments, threat modeling, penetration test reviews, and final security reviews.Conduct third-party vendor cybersecurity assessments and identify appropriate risk mitigation measures.Collaborate with development teams to integrate security-by-design and privacy-by-design principles into digital solutions.Incident Response & Security AssuranceCoordinate with Incident Response teams to validate remediation plans and support security communications when required.Work closely with R&D, Verification & Validation (V&V), and Program Management teams to ensure products meet cybersecurity compliance requirements prior to release.Participate in vulnerability management, remediation planning, and continuous improvement initiatives.Stakeholder Engagement & AwarenessDeliver cybersecurity and privacy awareness sessions, workshops, and webinars.Provide clear guidance and consultation to technical and non-technical stakeholders.Foster collaboration across global teams to maintain a strong cybersecurity culture and governance framework.What Qualifications Will Make You Successful?Required QualificationsBachelor's degree in Computer Science, Information Technology, Information Security, Engineering, or a related field, or equivalent combination of education and experience.Minimum 3 years of experience in cybersecurity, preferably supporting software development or R&D environments.Hands-on experience supporting Secure Development Lifecycle (SDL) activities.Strong knowledge of IEC 62443 cybersecurity standards.Experience conducting cybersecurity risk assessments and implementing risk mitigation strategies.Strong written and verbal communication skills with the ability to engage stakeholders across global teams.Fluency in English.Preferred QualificationsISA/IEC 62443 Cybersecurity Expert certification.CISSP, CSSLP, or other recognized cybersecurity certifications.Experience supporting industrial automation, OT, or Industrial Control System (ICS) environments.Multilingual capabilities, including Spanish or French.Key CompetenciesCybersecurity & Technical ExpertiseInformation Security Management principles and best practices.Risk assessment, vulnerability management, and security governance.Industrial Control Systems (ICS) and Operational Technology (OT) cybersecurity.Secure cloud architecture and cloud security controls.Data privacy and Privacy-by-Design methodologies.Authentication, authorization, encryption, and cryptographic technologies.Secure networking protocols including TCP/IP, TLS, SSH, MQTT/S, LDAP, Modbus, and OPC-UA.Threat modeling methodologies and security architecture review techniques.DevSecOps and application security practices.OWASP principles and secure coding concepts.Security Tools & PlatformsExperience with security and development tools such as: Coverity SonarQube Black Duck Hub Black Duck Binary Analysis Microsoft Threat Modeling Tool JFrog Jira ConfluenceProfessional SkillsStrong analytical and problem-solving abilities.Ability to manage multiple priorities and projects simultaneously.Excellent collaboration and stakeholder management skills.Demonstrated ability to work independently and take ownership of outcomes.Strong presentation, facilitation, and communication skills.Schedule: Full-time