Job ID
Location
China
Shanghai Shi
Shanghai
Remote vs. Office
Hybrid (Remote/Office)
Company
Siemens Energy Co., Ltd.
Organization
EVP Global Functions
Business Unit
Cybersecurity
Full / Part time
Full-time
Experience Level
Professional / Experienced
A Snapshot of Your Day
As Principal Cybersecurity Officer (PCSO) for Hub China, you will drive cybersecurity across Siemens Energy’s products, solutions, services, production sites and business-managed IT from a regional perspective with a focus on core governance enforcement as well as legal compliance. You will represent cybersecurity holistically for Siemens Energy’s operations, factories and business areas in the country. You will enable Siemens Energy’s operations, products and solutions in China to comply with Chinese cybersecurity laws, regulations and standards, monitor and interpret evolving legislation, translate requirements into effective security practices, and maintain key relationships with relevant authorities. You will also own the operational cybersecurity activities for China, including vulnerability management, risk assessments, asset protection and factory cybersecurity support. You will serve as a trusted advisor across the organization, bridging legal obligations and technical implementation.
How You’ll Make an Impact
Actively drive the cybersecurity strategy from a Cybersecurity core governance perspective and enable cybersecurity resilience, governance and regional management with customized
cybersecurity strategies for Regional Hub. Understands stakeholders’ business demand for cybersecurity and drives its delivery from a regional perspective.
Act as the senior cybersecurity representative for Siemens Energy in China, setting local priorities in line with global strategy, advancing cybersecurity objectives together with local stakeholders and translating them into an actionable regional plan.
Serve as the single point of contact for cybersecurity demand in China: prioritize and route business requests, coordinate responses with internal and external experts and track topics to closure.
Proactively anticipates risks and opportunities and provides standardized core governance reporting to senior management of respective areas on regular basis with respect to Cybersecurity Governance, Risk, Compliance and Maturity. Monitor changes and amendments to China’s cybersecurity laws, regulations and standards, ensuring the organization remains up to date with the latest compliance requirements.
Translate legislative and regulatory requirements into actionable cybersecurity practices for business operations, products and solutions, and communicate the impact and required actions to all business areas.
Maintain contact with Chinese cybersecurity authorities, coordinate required compliance reporting or audits and represent Siemens Energy’s position, including participation in relevant standardization and technical committee activities.
Ensure internal management systems, IT applications and business processes are aligned with Chinese cybersecurity laws to maintain compliance and support secure and stable operations.
Provide guidance for product, system and solution security compliance, working with R&D and engineering teams so that products and services for the Chinese market are designed and maintained in line with national laws and technical standards.
Coordinate the handling of cybersecurity incidents and vulnerabilities together with the Incident Management team, ensuring effective mitigation and timely fulfilment of legal reporting obligations.
Support customer-facing cybersecurity requests, including questionnaires and evidence, together with sales, bid and project teams.
Coordinate vulnerability management for China: validate ownership of findings, drive remediation with technical owners, escalate overdue items and report status and closure evidence.
Support cybersecurity business impact assessment and asset protection for local operations, following up on treatment actions and documenting decisions.
Support Siemens Energy factories together with local Industrial Cybersecurity Officers within the global governance framework and in alignment with global ICSOs and BA PCSOs: engage factory management, deliver shopfloor cybersecurity awareness and coordinate activities such as penetration tests and cyber drills, including follow-up on findings.
Promote a culture of cybersecurity by developing and delivering targeted awareness and training for management, engineering, sales and shopfloor audiences, so that stakeholders understand their responsibilities under China’s cybersecurity and product security requirements.
What You Bring
Bachelor’s degree in information security, Cybersecurity, Computer Science, Law or a related field.
Experience in strategic cybersecurity leadership, governance and risk advisory.
Experience in operational cybersecurity activities such as vulnerability management, exception handling, risk assessments or industrial cybersecurity.
Strong technical background and proven experience in cybersecurity compliance, covering both enterprise-level (policy/process) and product security, with experience in China being a must.
Strong knowledge of Chinese cybersecurity laws, regulations and the broader regulatory landscape, including relevant national and industry standards and certification requirements. Familiarity with CIIO requirements and technical committee participation is a plus.
Ability to interpret complex legal and technical documents and translate regulatory requirements into practical solutions. Practical experience with risk assessments, vulnerability management, incident coordination or factory cybersecurity is a strong advantage.
Demonstrated experience liaising with authorities and collaborating with cross-functional teams, including technical experts, legal counsel and business leaders.
Excellent communication skills in Mandarin Chinese and English, with the ability to present and influence at senior management level.
Vigilant in monitoring regulatory changes and technical standards, with a proactive approach to identifying compliance obligations and risks.
Excellent interpersonal skills, able to work collaboratively across departments and cultures, with integrity and professionalism in representing the company.
Able to work independently, set priorities and take ownership in a broad role covering governance, compliance, product security and operational cybersecurity.
Who is Siemens Energy?
At Siemens Energy, we are more than just an energy technology company. We meet the growing energy demand across 90+ countries while ensuring our climate is protected. With more than 92,000 dedicated employees, we not only generate electricity for over 16% of the global community, but we’re also using our technology to help protect people and the environment.
Our global team is committed to making sustainable, reliable, and affordable energy a reality by pushing the boundaries of what is possible. We uphold a 150-year legacy of innovation that encourages our search for people who will support our focus on decarbonization, new technologies, and energy transformation.
Our Commitment to Diversity
Lucky for us, we are not all the same. Through diversity we generate power. We run on inclusion and our combined creative energy is fueled by over 130 nationalities. Siemens Energy celebrates character – no matter what ethnic background, gender, age, religion, identity, or disability. We energize society, all of society, and we do not discriminate based on our differences.
Check out this video to learn more about Siemens Energy : https://www.siemens-energy.com/employeevideo
Rewards/Benefits , your opportunities for personal growth
Opportunity to work in a highly motivated team and in an international environment
Directly contributing on the establishment of the energy systems of tomorrow
The role exposes you to many different parts of the organization and all levels of hierarchy providing different insights and angles to the challenges at hand.
Jobs & Careers : https://jobs.siemens-energy.com/jobs
Apply on Siemens Energy’s careers page