Product Security Manager

Rockwell Automation is a global technology leader focused on helping the world’s manufacturers be more productive, sustainable, and agile. They are seeking a Product Security Manager to define the strategic direction and management standards for secure product development initiatives, while leading a high-performing team of security engineers.

Responsibilities:

• Lead a high-performing team of security engineers to solve complex security challenges and pioneer innovative solutions across the product development lifecycle, ensuring scalable controls for products spanning from embedded systems to cloud services
• Establish and implement a governance framework that drives continuous improvement and compliance with the Rockwell Automation Secure Development Lifecycle (SDL)
• Foster strong cross-functional partnerships across business units, product security leaders, and engineering teams to embed security as a core value and drive company-wide compliance for a diverse portfolio of products
• Leverage your engineering experience to deliver scalable security solutions throughout the product development lifecycle, ensuring alignment with stakeholders and adopters
• Collaborate with the Strategic Sourcing Organization to enhance supplier processes and continuously reduce supply chain risks
• Develop and implement data-driven decision-making methods, creating actionable operational metrics and early indicators that manage risk exposure
• Oversee assurance and compliance programs, ensuring alignment with company policies, global standards / regulations, and industry best practices
• Champion a culture of shared responsibility for security by driving collaboration among development, security, and operations teams, and facilitating secure deployments at scale for complex, distributed systems
• Leverage AI and other emerging technologies to automate, enhance, and scale security operations

Requirements:

• Bachelor's Degree or equivalent years of relevant work experience
• Legal authorization to work in the US is required - we will not sponsor individuals for employment visas, not now or in the future, for this job opening
• Typically requires 5+ years of relevant management experience
• Experience in software and/or application development
• Understanding of DevSecOps, cloud platform development, and security operations
• Utilize data to enable informed decision making quickly
• Experience in analyzing information to identify trends and diagnose problem areas
• Demonstrates strong team building, collaboration, and conflict resolution abilities
• Successful in achieving buy-in for ideas and exhibits a strong affinity for metrics
• Demonstrated ability to influence senior management and set expectations for enterprise initiatives
• Worked closely with software, firmware, hardware engineers, product quality engineers, product managers, and other engineering roles to facilitate secure processes and practices
• Familiarity with cybersecurity standards and practices related to security development lifecycles, such as IEC 62443, NIST SSDF, BSIMM, SOC 2, CRA, NIS2
• Security certifications (e.g., CISSP, CSSLP) from recognized organizations such as (ISC)2