Senior Engineer , Cybersecurity and Data Protection Advisor

At Schneider Electric, we empower all to make the most of our energy and resources, bridging progress and sustainability for all. We are seeking a Cybersecurity & Data Protection Advisor to join our IA Services & Advisory business and play a critical role in securing our digital ecosystem.

This position offers an exciting opportunity to support Schneider Electric's digital transformation initiatives, including AI-powered solutions, Industrial IoT, Edge Computing, cloud-native technologies, and digital services. You will serve as a trusted cybersecurity advisor, partnering with product, engineering, and business teams to ensure security and privacy requirements are embedded throughout the lifecycle of our digital offerings.

As a Cybersecurity & Data Protection Advisor, you will help strengthen the cybersecurity and data protection posture of digital assets, provide guidance on secure development practices, and support certification and compliance activities across globally distributed teams.

• Lead cybersecurity and data protection engagements for Schneider Electric digital assets, including software applications, technology platforms, APIs, and digital offers.
• Partner with business, product, and engineering teams to identify cybersecurity and privacy requirements and implement appropriate controls.
• Conduct risk assessments and provide recommendations to mitigate identified risks.
• Review and evaluate security controls to ensure alignment with Schneider Electric cybersecurity and privacy standards.
• Support security certification and governance activities, ensuring required evidence and documentation are completed accurately and on time.

• Guide project and product teams through all phases of the Secure Development Lifecycle (SDL).
• Support cybersecurity requirements definition, risk assessments, threat modeling, penetration test reviews, and final security reviews.
• Conduct third-party vendor cybersecurity assessments and identify appropriate risk mitigation measures.
• Collaborate with development teams to integrate security-by-design and privacy-by-design principles into digital solutions.

• Coordinate with Incident Response teams to validate remediation plans and support security communications when required.
• Work closely with R&D, Verification & Validation (V&V), and Program Management teams to ensure products meet cybersecurity compliance requirements prior to release.
• Participate in vulnerability management, remediation planning, and continuous improvement initiatives.

• Deliver cybersecurity and privacy awareness sessions, workshops, and webinars.
• Provide clear guidance and consultation to technical and non-technical stakeholders.
• Foster collaboration across global teams to maintain a strong cybersecurity culture and governance framework.

• Bachelor's degree in Computer Science, Information Technology, Information Security, Engineering, or a related field, or equivalent combination of education and experience.
• Minimum 3 years of experience in cybersecurity, preferably supporting software development or R&D environments.
• Hands-on experience supporting Secure Development Lifecycle (SDL) activities.
• Strong knowledge of IEC 62443 cybersecurity standards.
• Experience conducting cybersecurity risk assessments and implementing risk mitigation strategies.
• Strong written and verbal communication skills with the ability to engage stakeholders across global teams.
• Fluency in English.

• ISA/IEC 62443 Cybersecurity Expert certification.
• CISSP, CSSLP, or other recognized cybersecurity certifications.
• Experience supporting industrial automation, OT, or Industrial Control System (ICS) environments.
• Multilingual capabilities, including Spanish or French.

• Information Security Management principles and best practices.
• Risk assessment, vulnerability management, and security governance.
• Industrial Control Systems (ICS) and Operational Technology (OT) cybersecurity.
• Secure cloud architecture and cloud security controls.
• Data privacy and Privacy-by-Design methodologies.
• Authentication, authorization, encryption, and cryptographic technologies.
• Secure networking protocols including TCP/IP, HTTPS, TLS, SSH, MQTT/S, LDAP, Modbus,…