Cybersecurity Governance Specialist (f/m/d) - Software Development (Agile)
Core
Design, implement, and run a cybersecurity governance program for software development, integrating security controls into the SDLC and Agile ceremonies.
Role type
Senior Cybersecurity Governance Specialist (GRC)
Builds
Security governance frameworks, policies, and compliance artifacts for software development teams.
Domain
Cybersecurity Governance, Software Development Lifecycle (SDLC), Energy Grid Software
Required skills
Cybersecurity governance, GRC, Security architecture, Agile/Scrum, Application security, SDLC, Regulatory standards translation, Risk assessment, Policy authoring (via careerplan.io/jobs/12465-1635075-1-S-cybersecurity-governance-specialist-fmd-software-development-agile-at-siemens-ag)
Preferred skills
OT/ICS environments, EU Cyber Resilience Act (CRA), SBOM/VEX lifecycle, Master's degree in CS/Cybersecurity, CISSP/CISM certifications
Technologies
ISO/IEC 27001, IEC 62443, CRA, NIS2, SBOM, VEX
Responsibilities
Translate regulatory standards into governance requirements for Agile sprints; Integrate security checkpoints into engineering lifecycle; Author and maintain cybersecurity policies and standards; Conduct risk assessments and support audits; Deliver governance KPIs and report to leadership.
Seniority
Senior, hands-on IC
