SDLC Security and Compliance Lead
New
I
Inductive AutomationIndustrial automation
United States - RemoteFull-TimeLead
Salary163,000 - 180,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- Experience (8 years required; 15+ years preferred)
- Required Skills
- Software Development
Requirements
- Have a technical bachelor’s degree in computer science, engineering, software development, or cybersecurity.
- Have a relevant master’s degree or demonstrated equivalent experience.
- Have a cybersecurity certification or equivalent demonstrated experience, such as CISSP, GICSP, or ISA/IEC 62443 Cybersecurity Expert.
- Have at least 8 years of experience; 15+ years is preferred.
- Bring software development experience, which may include design, testing, assurance, or management; agile experience is preferred.
- Have extensive security or compliance audit experience.
- Have ISO Lead Auditor experience or equivalent.
- Have extensive experience with policy and process documentation.
- Have experience delivering software in a controlled or regulated environment.
- Have incident management or coordinated vulnerability disclosure program experience.
- Be able to communicate with and present to executive leadership.
Responsibilities
- Serve as the working lead and subject matter expert for IEC 62443 certifications, aligning standard requirements with company practices.
- Monitor Development and Quality Assurance practice changes, support corrective actions, and address compliance drift.
- Track security roadmap and EU Cyber Resilience Act product-level requirements.
- Represent Software Engineering in ISO and CRA conformity audits and prepare and maintain auditable evidence.
- Maintain process documents, mappings between committed standards and QMS documentation, and SDLC traceability.
- Coordinate third-party penetration testing and incorporate results into the SDLC ticket process.
- Verify Release Checklist completion as compliance evidence for production software, including hotfixes.
- Maintain the Software Engineering portion of the Coordinated Vulnerability Disclosure and incident management program, including playbooks, training, and disclosure coordination.
- Run readiness checks and pre-audit gap assessments, track personnel qualifications, and identify training gaps.
- Consult on threat modeling and participate in related activities.
View Full Description & ApplyYou'll be redirected to the employer's site
