Senior Cyber Security Architect

Role Overview

The Senior Cyber Security Architect will lead and coordinate efforts to implement secure development lifecycle practices and assess cybersecurity deliverables in new product development. This role involves auditing processes, participating as a security representative in projects, managing product risk assessments, threat modeling, and vulnerability handling. The architect will foster adoption of security best practices across business units and maintain documentation and communication artifacts related to product security functions.

Key Responsibilities

• Manage and oversee secure development lifecycle implementation across projects.
• Conduct audits and assessments of cybersecurity deliverables within new product development.
• Serve as product security liaison in key projects.
• Collaborate with business teams to catalog products and evaluate risks.
• Lead product risk assessment, vulnerability management, and threat modeling activities.
• Facilitate cross-functional communities to drive secure development and security best practice adoption.
• Maintain central repositories for product security communications and documentation.
• Support trend analysis in product security market and technology landscapes.
• Assist with security training and development for various organizational roles.
• Stay current with industry standards such as IEC 62443, IEC 29147, IEC 30111, ISO/IEC 27001, EU Cyber Resilience Act, and NIST SP 800-218.
• Support Product Security Incident Response Team activities and vulnerability management processes.
• Build and maintain strong relationships with business units, organizational functions, and partners.

Candidate Profile

• Preferred experience in industrial control systems, embedded systems, or network security.
• Knowledge of secure development lifecycle concepts including secure by design and defense in depth.
• Proficiency with Microsoft Office tools for communication and information management.
• Strong skills in organizing, preparing, and delivering impactful presentations.
• Self-driven with ability to meet tight deadlines.
• Excellent problem-solving and interpersonal skills.
• Good organizational abilities and teamwork orientation.

Preferred Qualifications

• Master’s degree or equivalent experience in electronics engineering or related discipline.
• Familiarity with Risk Management Framework and associated processes.
• Experience with standards such as IEC 62443, IEC 27001, NIST frameworks, COBIT.
• Awareness of technology trends and security concerns relevant to control systems and similar products.
• Project management and product development process experience.
• Exposure to recognized security standards and technologies.
• Knowledge of software bills of material (SBOM).
• Background in secure coding and code review methodologies.
• Experience in industrial or factory automation and control system domains.