Cyber Security Expert

Schneider Digital (SD) is the global IT organization within Schneider Electric. The Digital Assets Certification Framework is a SCHNEIDER DIGITAL initiative to ensure the organization is delivering best in class applications that are sustainable, compliant, and secure.

This role reports to China Architect Leader and will be working in collaboration with Project Managers and project delivery teams, as well as with Global Cyber Certification Leader and the Global Security team to embed cybersecurity and privacy controls into all the digital assets assigned

This includes the following:

• Handle cybersecurity and privacy (certification) engagements end to end for SE's digital assets (Software Applications, Technology Platforms, Schneider Electric Digital Offers, APIs) in the relevant region or assigned business domain.
• Cybersecurity and privacy engagements involve assisting project and product delivery teams in identifying IT security and data protection requirements and embedding the required controls into the digital asset.
• Prior to release or deployment of the product confirm if it is compliant with security requirements, or that sufficient compensating controls have been put in place to mitigate identified risks and thus achieve compliance.
• The engagements involve application security and privacy advisory services to products and software which are either developed in house or procured through third party vendors.
• Perform cloud security assessments for Third Party SaaS vendors through the CSA framework
• Conduct risk assessments and communicate the outcomes to IT and Business application owners.
• Understanding the general IT security policies of the company.
• Conduct awareness sessions and webinars for stakeholders in the respective geographies on cybersecurity and privacy requirements.
• Work closely with project delivery teams, perform everyday communications with project managers and technical specialists, introduce the certification engagements and ensure that the compliance is achieved before applications are put into production

资格

Education and Training
Information Technology, Information Security and Risk Management degrees

Skills / Behaviors

• Project Management
• Advance Knowledge of Cybersecurity and Privacy Principles
• Leadership / Act like owners
• Collaboration/Teamwork
• Communications (Written and Oral)
• Requirements Gathering and Analysis
• Interpersonal Skills, proactiveness
• Willing to learn new skills / Learn Everyday

Knowledge

The candidate should have in-depth knowledge and experience of the following:

• Expertise in applying Information Security Management principles and standards in areas such as threats and vulnerabilities, risk assessment and mitigation, security policy and security management process
• Expertise in ensuring compliance with personal data protection legislation in EU and relevant regions.
• Understanding or experience on any of the following is an advantage:
  • Cloud Security Assessment and Security Audits of Cloud Environment
  • Vulnerability Management (Process, Tools and Metrics)
  • NIST Cybersecurity Framework
  • Critical Security Controls (CSC)
• Expertise in DevSecOps methodologies is also an advantage.

Experience and Professional Certification

• 5+ years experience in general IT management, security, and data protection.
• Some of the desired certifications (if not achieved, the role holder could aspire to achieve these as part of their development plans in this role)
  • CISSP (Certified Information Systems Security Professional)
  • CIPP (Certified Information Privacy Professional) (good to have)
  • CISM (Certified Information Security Manager)
  • CCSP (Certified Cloud Security Professional)
  • OSCP, CEH (Desirable)
  • Any other product specific security certification (e.g. Microsoft or AWS)

时间表: 全职
请求编号: 009IUM

Client-provided location(s): Beijing, China

Job ID: Schneider_Electric-https://careers.se.com/jobs/009IUM?lang=zh-cn

Employment Type: OTHER

Posted: 2026-03-13T18:58:56