Job highlights

- Experience: 12-15 Years. Qualification: B E / B Tech / M E / M Tech (Computer Science / IT / related discipline). Role Overview Lauritz Knudsen Electrical Automation is seeking an experienced Product Security Advisor to lead and drive Security by Design and Shift-Left Security initiatives across connected products and platforms

Job Summary Position: Senior Manager - Product Security (Security Advisor)

Location: Navi Mumbai

Experience: 12-15 Years

Qualification: B. E. / B. Tech / M. E. / M. Tech (Computer Science / IT / related discipline)

Role Overview Lauritz Knudsen Electrical Automation is seeking an experienced Product Security Advisor to lead and drive Security by Design and Shift-Left Security initiatives across connected products and platforms. This role is responsible for adoption, governance, and execution of Secure Development Lifecycle (SDL) practices in line with IEC 62443-4-1, advising RD and product teams on cybersecurity architecture, secure implementation, and regulatory compliance. The role combines deep technical expertise, process ownership, and assertive stakeholder engagement, ensuring cybersecurity requirements are embedded from early design through product release.

Key Responsibilities

- Product Secure Development Lifecycle Leadership
- Act as Subject Matter Expert (SME) to ensure cybersecurity is prioritized and embedded in offer/product development from concept and design phase onward.
- Drive implementation of Secure Development Lifecycle (SDL) practices aligned with IEC 62443-4-1, including: Threat modeling; Secure design and architecture; Secure coding practices; Security testing and validation
- Support development teams in risk-driven cybersecurity decision-making throughout the product lifecycle.




- Security Governance Compliance
- Ensure adherence to IEC 62443 standards, including exposure to: IEC 62443-4-2 (Product Security Requirements); IEC 62443-3-3 (System Security Requirements)
- Support internal SDL audits, cybersecurity reviews, and regulatory compliance activities.
- General
- Advise on regulatory, data protection, and privacy requirements for connected products and cloud-based offers.
- Represent product development teams in Business Unit, PSO, and corporate cybersecurity forums.
- Technical Advisory Risk Management
- Provide expert guidance on: Threat modeling (STRIDE and equivalent frameworks); Risk analysis and CVSS scoring; Vulnerability triage, remediation, and closure
- Support teams in maintaining secure software environments, including: Secure coding; Static code analysis; Software Composition Analysis (SCA); Software Bill of Materials (SBOM)
- Advise on DevSecOps practices and secure CI/CD pipelines.
- Metrics, Maturity Continuous Improvement
- Define and collect SDL and cybersecurity metrics to support data-driven security strategies.
- Monitor and improve organizational maturity using Cybersecurity Maturity Frameworks.
- Track SDL effectiveness, risk posture, and security KPIs and report to RD leadership.
- Training, Awareness Community Engagement
- Conduct cybersecurity training sessions, workshops,



and awareness programs for development and architecture teams.
- Actively participate in internal and external cybersecurity communities and stay updated on emerging threats, standards, and regulations.
- Continuously update leadership on relevant cybersecurity trends, policies, and legislative changes.

Key Technical Functional Competencies

- Strong expertise in Product Security and Cloud Security
- In-depth understanding of OT IoT technologies, protocols, and architectures
- Hands-on experience with: Secure Development Lifecycle (IEC 62443-4-1 or equivalent); Threat modeling and security testing; Secure design and secure coding; Vulnerability management and risk-driven security
- Solid knowledge of: IEC 62443, NIST frameworks; Data protection, privacy screening, and data security; Cybersecurity maturity models and governance frameworks
- Experience Qualifications
- Bachelor's or Master's degree in Computer Science, IT, or related field
- 12-15 years total experience in engineering/product organizations
- 8+ years in Product Security / Cloud Security
- Minimum 5+ years hands-on experience with IEC 62443-based product security
- Exposure to IEC 62443 certification activities (4-2 and 3-3)
- Certifications such as CISSP, CISM, Azure Security certifications are highly desirable
- Preferred Industry Experience
- Power Distribution
- Energy Management
- Water Utilities
- Oil Gas
- Industrial Automation / OT environments

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Sr Manager - Digital Solutions (Mumbai)
🏢 Schneider Electric
📍 Mumbai