Product Security and Data Communications Manager

Emerson•Cranberry Township, PA

10h

About The Position

Emerson is seeking a Product Security and Data Communications Manager to lead the development, implementation, and continuous improvement of cybersecurity processes, communications technologies, third-party integrations, and product development that protect its Industrial Automation and Control System products. The role partners across IT, OT, Engineering, Product Development, and business units, and participates in product security governance and incident response while supporting regulatory and industrial standards compliance and strengthening security resilience. At Emerson Power & Water Solutions, the role supports Ovation, a controls automation offering for power generation and water treatment facilities. The manager leads product cybersecurity strategy, governance, compliance, secure development, vulnerability management, penetration testing, incident response coordination, and risk mitigation. The position also manages third-party cybersecurity solutions and integrations; drives compliance and certification initiatives, including IEC 62443; and provides leadership for industrial communications architectures and system integration across operational and enterprise environments. Relevant communications protocols include OPC UA, MQTT, Modbus, DNP3, IEC 61850, PROFINET, and BACnet. The manager partners with internal and external stakeholders, leads and develops a team of cybersecurity and communications professionals, and promotes a strong security culture.

Requirements

Bachelor's degree in Cybersecurity, Computer Engineering, Computer Science, Information Technology, Engineering, or a related discipline; an equivalent combination of education and experience will be considered.
Minimum 5 years of progressive cybersecurity experience, leading cybersecurity operations, risk management, compliance, and incident response programs.
Strong background in leadership or people management.
Strong background in industrial networking, data communications, automation, or related fields.
Knowledge of IEC 62443, vulnerability management, and NERC-CIP.
Experience with process and product certifications such as SAFETY Act and IEC 62443 4-1, 4-2, and 3-3.
Legal authorization to work in the United States without sponsorship now or in the future; sponsorship is not provided.

Nice To Haves

10 or more years of progressive cybersecurity experience.
Experience securing Industrial Control Systems (ICS), Operational Technology (OT), manufacturing, or industrial automation environments.
Experience supporting global organizations and distributed teams.
Knowledge of the Ovation Product Portfolio and/or critical infrastructure and industrial cybersecurity regulations affecting the power, water, and controls/automation industries.
Professional certifications including CISSP, Security+, or GICSP.
Strong understanding of ISO 27001, the NIST Secure Software Development Framework, the NIST Cybersecurity Framework, the OWASP Software Assurance Maturity Model, and the OWASP Secure by Design Framework.
Strong understanding of Zero Trust, Secure by Design, cloud security (Azure and/or AWS), Identity & Access Management, Security Operations and Threat Detection, and Software Bill of Materials.

Responsibilities

Lead product cybersecurity strategy, governance, compliance, and secure development practices across the product portfolio.
Oversee vulnerability management, penetration testing, incident response coordination, and cybersecurity risk mitigation efforts.
Manage third-party cybersecurity solutions, vendor relationships, and integration activities.
Drive compliance and certification initiatives, including IEC 62443 and evolving cybersecurity regulations.
Lead industrial communications architectures and system integration across operational and enterprise environments, including architectures using OPC UA, MQTT, Modbus, DNP3, IEC 61850, PROFINET, BACnet, and other industry protocols.
Partner with internal and external stakeholders to advance product security objectives and technology roadmaps.
Lead, mentor, and develop a team of cybersecurity and communications professionals while promoting a strong security culture.