Cybersecurity Professional

We at Smart Infrastructure Division in Siemens Ltd. is one of the top tier global suppliers of products, systems, solutions, and services for the efficient, reliable, and intelligent transmission and distribution of electrical power. As the trusted partner for the development and extension of an efficient and reliable power infrastructure that industry and the portfolio they need.

JOIN US WE MAKE REAL WHAT MATTERS. THIS IS YOUR ROLE.

Mission of function
- The mission of the cybersecurity professional is to act as an expert and support the factory as partner by planning, supervising, ensuring, and reporting of appropriate activities with regards to failure prevention and effective proceedings (pro-active and re-active) with respect to cybersecurity. The S/He acts as a catalyst for continuous improvement of overall cybersecurity management, e.g., by continuously monitoring the OT, identifying cybersecurity threats & vulnerabilities, communicating lessons learned from other information resources to the respective teams as well as documenting own lessons learned and process improvement. Of particular importance is the authority to intervene at any stage in the process, in case of non-conformance in proceedings with respect to cybersecurity. S/He acts as member of the core factory team and functionally reports to RC-IN SI EA IDS CY-SUS.

Dimension of function
- The role is responsible to
- 1. Establish, implement, maintain & continuously improve cybersecurity management system in line with HQ principles / guidelines / standards as decided by factory management.
2. Local vulnerability management, e.g., identification, monitoring, reporting, tracing, and tracking, identification, and implementation of the necessary actions to remove / manage the vulnerabilities.
3. Assessment / evaluation / qualification of supplier & the software / IT hardware with respect to cybersecurity requirements, patch management, service level contracts.

Managing incidents Investigating and responding to security incidents, including analyzing and containing the impact of security breaches.
Developing incident response plans and conducting exercises to test the effectiveness of these plans.
5. Checking and aligning all critical assets according to the ACP Process and coming out of the factory OT list (under responsibility of factory Asset Specific Owner (ASO))
6. Checking and preparing all relevant prerequisites, if necessary, IT repository registration (UPMX, ITAM, SVM, ACP webtool entry etc.) to be able to kick of the ACP Process and run the BIA
7. OT Cybersecurity initiatives, programs, and ad hoc measures
8. OT Awareness trainings and factory inspections
9. In remediating the outcome of OT factory assessments and audits to ensure implementation
10. Periodic assessment of systems & processes for adherence to all above points.
11. Providing technical guidance and support to IT teams and other stakeholders on security-related issues.
12. Collaborating with internal and external stakeholders to ensure that cybersecurity policies and procedures are aligned with business objectives and regulatory requirements.

Contacts (internal / external)
- **Internal**: Department / Function Heads, Factory Management, Case-to-case interactions with other factories, BU, RC-IN CYS, RC-IN IT, RC-IN SI IT

**External**: Case-by-case interaction with the customer (e.g., in sales support, customer relations management), suppliers, contacts with other third parties (e.g., external bodies).

WE’VE GOT QUITE A LOT TO OFFER, HOW ABOUT YOU?