Product Security Manager

Rockwell Automation•Mayfield Heights, OH

1d•Hybrid

About The Position

In this position, you will be accountable for defining the strategic direction, operational guidelines, and management standards required to support secure product development initiatives. You will accomplish objectives by implementing transparent reporting mechanisms and ensuring consistent application of our Secure Development Lifecycle (SDL) practices. The scope is enterprise-wide, leading a corporate center of excellence that governs all product teams at Rockwell Automation, and establishing security expectations of third-party suppliers. This hybrid role necessitates working from one of the designated company offices, with direct reporting to the Product Security Director.

Requirements

Bachelor's Degree or equivalent years of relevant work experience.
Legal authorization to work in the US is required - we will not sponsor individuals for employment visas, not now or in the future, for this job opening.

Nice To Haves

Typically requires 5+ years of relevant management experience.
Experience in software and/or application development.
Understanding of DevSecOps, cloud platform development, and security operations.
Utilize data to enable informed decision making quickly.
Experience in analyzing information to identify trends and diagnose problem areas.
Demonstrates strong team building, collaboration, and conflict resolution abilities.
Successful in achieving buy-in for ideas and exhibits a strong affinity for metrics.
Demonstrated ability to influence senior management and set expectations for enterprise initiatives.
Worked closely with software, firmware, hardware engineers, product quality engineers, product managers, and other engineering roles to facilitate secure processes and practices.
Familiarity with cybersecurity standards and practices related to security development lifecycles, such as IEC 62443, NIST SSDF, BSIMM, SOC 2, CRA, NIS2.
Security certifications (e.g., CISSP, CSSLP) from recognized organizations such as (ISC)2.

Responsibilities

Lead a high-performing team of security engineers to solve complex security challenges and pioneer innovative solutions across the product development lifecycle, ensuring scalable controls for products spanning from embedded systems to cloud services.
Establish and implement a governance framework that drives continuous improvement and compliance with the Rockwell Automation Secure Development Lifecycle (SDL).
Foster strong cross-functional partnerships across business units, product security leaders, and engineering teams to embed security as a core value and drive company-wide compliance for a diverse portfolio of products.
Leverage your engineering experience to deliver scalable security solutions throughout the product development lifecycle, ensuring alignment with stakeholders and adopters.
Collaborate with the Strategic Sourcing Organization to enhance supplier processes and continuously reduce supply chain risks.
Develop and implement data-driven decision-making methods, creating actionable operational metrics and early indicators that manage risk exposure.
Oversee assurance and compliance programs, ensuring alignment with company policies, global standards / regulations, and industry best practices.
Champion a culture of shared responsibility for security by driving collaboration among development, security, and operations teams, and facilitating secure deployments at scale for complex, distributed systems.
Leverage AI and other emerging technologies to automate, enhance, and scale security operations.