Job Description

Position: Senior Manager – Product Security (Security Advisor)

Location: Navi Mumbai (Mahape)

Experience: 12–15 Years

Qualification: B.E. / B.Tech / M.E. / M.Tech (Computer Science / IT / related discipline)

Role Overview

Lauritz Knudsen Electrical & Automation is seeking an experienced Product Security Advisor to lead and drive Security by Design and Shift-Left Security initiatives across connected products and platforms. This role is responsible for adoption, governance, and execution of Secure Development Lifecycle (SDL) practices in line with IEC 62443-4-1, advising R&D and product teams on cybersecurity architecture, secure implementation, and regulatory compliance. The role combines deep technical expertise, process ownership, and assertive stakeholder engagement, ensuring cybersecurity requirements are embedded from early design through product release.

Key Responsibilities

Product & Secure Development Lifecycle Leadership

• Act as Subject Matter Expert (SME) to ensure cybersecurity is prioritized and embedded in offer/product development from concept and design phase onward.

• Drive implementation of Secure Development Lifecycle (SDL) practices aligned with IEC 62443-4-1, including:

  • Threat modeling
  • Secure design and architecture
  • Secure coding practices
  • Security testing and validation

• Support development teams in risk-driven cybersecurity decision-making throughout the product lifecycle.

Security Governance & Compliance

• Ensure adherence to IEC 62443 standards, including exposure to:

  • IEC 62443-4-2 (Product Security Requirements)
  • IEC 62443-3-3 (System Security Requirements)

• Support internal SDL audits, cybersecurity reviews, and regulatory compliance activities.

General

• Advise on regulatory, data protection, and privacy requirements for connected products and cloud-based offers.

• Represent product development teams in Business Unit, PSO, and corporate cybersecurity forums.

Technical Advisory & Risk Management

• Provide expert guidance on:

  • Threat modeling (STRIDE and equivalent frameworks)
  • Risk analysis and CVSS scoring
  • Vulnerability triage, remediation, and closure

• Support teams in maintaining secure software environments, including:

  • Secure coding
  • Static code analysis
  • Software Composition Analysis (SCA)
  • Software Bill of Materials (SBOM)

• Advise on DevSecOps practices and secure CI/CD pipelines.

Metrics, Maturity & Continuous Improvement

• Define and collect SDL and cybersecurity metrics to support data-driven security strategies.

• Monitor and improve organizational maturity using Cybersecurity Maturity Frameworks.

• Track SDL effectiveness, risk posture, and security KPIs and report to R&D leadership.

Training, Awareness & Community Engagement

• Conduct cybersecurity training sessions, workshops, and awareness programs for development and architecture teams.

• Actively participate in internal and external cybersecurity communities and stay updated on emerging threats, standards, and regulations.

• Continuously update leadership on relevant cybersecurity trends, policies, and legislative changes.

Key Technical & Functional Competencies

• Strong expertise in Product Security and Cloud Security

• In-depth understanding of OT & IoT technologies, protocols, and architectures

• Hands-on experience with:

  • Secure Development Lifecycle (IEC 62443-4-1 or equivalent)
  • Threat modeling and security testing
  • Secure design and secure coding
  • Vulnerability management and risk-driven security

• Strong knowledge of:

  • IEC 62443, NIST frameworks
  • Data protection, privacy screening, and data security
  • Cybersecurity maturity models and governance frameworks

Experience & Qualifications

• Bachelor’s or Master’s degree in Computer Science, IT, or related field

• 12–15 years total experience in engineering/product organizations

• 8+ years in Product Security / Cloud Security

• Minimum 5+ years hands-on experience with IEC 62443-based product security

• Exposure to IEC 62443 certification activities (4-2 and 3-3)

• Certifications such as CISSP, CISM, Azure Security certifications are highly desirable

Preferred Industry Experience

• Power Distribution

• Energy Management

• Water & Utilities

• Oil & Gas

• Industrial Automation / OT environments

Rewards designed for you

Our Total Rewards is our way of saying: We see you and we value you. It’s more than just pay and benefits—it’s a meaningful investment in you. It is designed to help you perform, grow, feel safe, and elevate your potential. The package helps you care for yourself and your family, plan your future, grow your skills and career, collaborate in an inclusive workplace, and contribute to your community. At Schneider Electric, we’re here for what matters most to you. Discover more at our Career Page. * Country-specific programs and initiatives may be available.

Looking to make an IMPACT with your career?

When you are thinking about joining a new team, culture matters. At Schneider Electric, our values and behaviors are the foundation for creating a great culture to support business success. We believe that our IMPACT values – Inclusion, Mastery, Purpose, Action, Curiosity, Teamwork – starts with us. IMPACT is also your invitation to join Schneider Electric where you can contribute to turning sustainability ambition into actions, no matter what role you play. It is a call to connect your career with the ambition of achieving a more resilient, efficient, and sustainable world. We are looking for IMPACT Makers; exceptional people who turn sustainability ambitions into actions at the intersection of automation, electrification, and digitization. We celebrate IMPACT Makers and believe everyone has the potential to be one. Become an IMPACT Maker with Schneider Electric – apply today!

• €40 billion global revenue

• +9% organic growth

• 150 000+ employees in 100+ countries

You must submit an online application to be considered for any position with us. This position will be posted until filled.

Schneider Electric aspires to be the most inclusive and caring company in the world, by providing equitable opportunities to everyone, everywhere, and ensuring all employees feel uniquely valued and safe to contribute their best. We mirror the diversity of the communities in which we operate, and ‘inclusion’ is one of our core values. We believe our differences make us stronger as a company and as individuals and we are committed to championing inclusivity in everything we do. At Schneider Electric, we uphold the highest standards of ethics and compliance, and we believe that trust is a foundational value. Our Trust Charter is our Code of Conduct and demonstrates our commitment to ethics, safety, sustainability, quality and cybersecurity, underpinning every aspect of our business and our willingness to behave and respond respectfully and in good faith to all our stakeholders. You can find out more about our Trust Charter here

Schneider Electric is an Equal Opportunity Employer. It is our policy to provide equal employment and advancement opportunities in the areas of recruiting, hiring, training, transferring, and promoting all qualified individuals regardless of race, religion, color, gender, disability, national origin, ancestry, age, military status, sexual orientation, marital status, or any other legally protected characteristic or conduct.