Senior Software Governance Engineer

AVEVA is a global leader in industrial software. Our cutting‑edge solutions are used by thousands of enterprises to deliver the essentials of life – such as energy, infrastructure, chemicals and minerals – safely, efficiently and more sustainably.

We’re the first software business in the world to have our sustainability targets validated by the SBTi, and we’ve been recognized for the transparency and ambition of our commitment to diversity, equity, and inclusion. We’ve also recently been named as one of the world’s most innovative companies.

If you’re a curious and collaborative person who wants to make a big impact through technology, then we want to hear from you! Find out more at AVEVA Careers.

For more information about our privacy policy and how to manage cookies, visit our Privacy Policy.

Job Title:

Senior Software Governance Engineer

Location:

Beijing

Employment Type:

full-time

The Senior Software Governance Engineer is responsible for establishing and driving software governance practices across the China HMI product portfolio. This role ensures products are delivered in accordance with AVEVA release requirements and meet expectations for quality, security, compliance, traceability, auditability, and engineering risk management.

Working closely with Development, QA, Dev Ops, Product Management, Security, Legal, and Global R&D teams, the position serves as a key governance authority throughout the software development lifecycle and helps ensure that software can be released with confidence.

• Own software governance for the China HMI product portfolio, ensuring products are released and delivered in accordance with AVEVA release, quality, security, and compliance requirements.
• Coordinate release readiness and cross-product release activities across HMI, SCADA, Historian, and other related products.
• Identify, assess, and drive reduction of software risks through proactive monitoring of engineering quality indicators, including compiler warnings, static analysis findings, technical debt, vulnerability reports, and defect trends.
• Serve as Security Advisor for assigned products, driving vulnerability management and remediation using tools such as Black Duck and Coverity.
• Govern open-source software usage, license compliance, and SBOM generation to ensure regulatory and corporate compliance.
• Establish and maintain end-to-end traceability between requirements, source code, build artifacts, releases, and customer deliverables to support auditability and software supply chain integrity.
• Drive continuous improvement and automation of software governance practices while balancing compliance requirements with engineering productivity.

• Bachelor's degree or above in Computer Science, Software Engineering, Information Security, or a related discipline.
• 5+ years of experience in software engineering, release engineering, Dev Ops, software quality, software governance, or related technical roles.
• Solid understanding of the Software Development Lifecycle (SDLC), software release processes, and modern software engineering practices.
• Experience with source control and CI/CD systems such as Git, Azure Dev Ops, Git Hub, Git Lab, Jenkins, or equivalent platforms.
• Strong understanding of software quality and engineering risk management, including static analysis, code quality assessment, defect management, and technical debt reduction.
• Experience using software quality and security tools such as Coverity, Sonar Qube, Black Duck, Snyk, Fortify, or similar solutions.
• Familiarity with software vulnerability management and Secure Software Development Lifecycle (SSDLC) practices.
• Understanding of open-source software licensing and software composition analysis concepts.
• Experience analyzing…