Cyber Security Engineer, Contract Engineering

Rockwell Automation is a global technology leader focused on helping the world’s manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility - our people are energized problem solvers that take pride in how the work we do changes the world for the better.

We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that’s you we would love to have you join us!

Job Description

Rockwell Automation is a global technology leader focused on helping the world’s manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies world, provide life-saving medicine on a global scale, and focus on clean water and green mobility - our people are energized problem solvers that take pride in how the work we do changes the world for the better.

We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that’s you we would love to have you join us!

You will be professional guided by the Contract Engineering GRC and Security Lead who is accountable to implement and lead the cybersecurity program across the Capabilities & Innovation and to ensure compliance to cybersecurity standards, as applicable, such as DwS (Deliver-with-Security), IEC 62443, ISO 27001, NIS2 and other security standards and directives as they evolve and are announced going forward. (Note: This position is related to cybersecurity only. For ease of reading below we use the term

“security” in some cases instead).

This position will be based in Milwaukee, WI or Mayfield Heights, OH, with flexible work environment option available and will report to will report to the Global Engineering Manager, Contracts Capabilities

Key Responsibilities - What You'll Do:

• Lead the rollout, training and execution of security programs within their business in coordination with Contract Engineering GRC and Security Lead and the Office of Product Safety and Security (OPSS) to fully understand the requirements and ensure the business remains in continuous compliance.
• Lead security vulnerability and risk assessments on business offerings, development and delivery processes, and issue investigations, drive risk mitigations efforts and participate in appropriate incident response activities, as required.
• Lead the response and actions to mitigate identified security risks impacting the business, which may originate from various sources including internal teams, vendors, customers, and partners.
• Prioritize and execute key security programs to drive continuous improvement in the maturity of security for the business and its offerings, in alignment with the LCS Cyber Security Coordinator.
• Ensure regular communication to the Capabilities & Innovation management to ensure leadership awareness of the compliance status, risks, mitigation plans, etc. This includes driving resource and other investment needs to support compliance to all security program requirements.
• Act as key contact for the business in responding to customer and / or customers' auditors security-related inquiries and be responsible for ensuring high quality responses to customers, demonstrating Rockwell Automation’s expertise.
• Create and maintain business specific training on security requirements (regulations and standards) and ensure training is cascaded to all impacted personnel in the business. Update business policies and procedures, as required, to support implementation & tracking of requirements.
• Lead development of engineering standards, best practices, and specific implementation guidance of security program requirements with support of business Cyber Security Subject Matter Experts (SMEs), as required, to drive consistency and efficiency of execution for the delivery of offerings.
• Act as Cyber Security function in the services offering development process - review requirements and related delivery processes of new offerings for adherence to applicable security standards, lead risk assessments and sign-off as member of the governance team.
• Act as the key point of contact for security related inquiries (from customer or internal sources) within their business.
• Assess exception requests from delivery team