Job Opportunities API

Are you a security specialist in the OT space looking to expand your expertise into cloud solutions? Are you a cloud security champion passionate about bringing your expertise into OT/IoT space? At Priva Product Development Organisation we are looking for the Security Architect who will shape the security of our products.      Security Architect in Priva Product Development – Why this role matters   At Priva, we develop hardware products and software services for horticulture and building automation. Seeing the importance of our products for our customers, we recognize the need to continuously keep these secure in the ever evolving, fast-paced world. The security requirements in our landscape span four different areas:  Physical/embedded device security.  OT (operational technology) network security.  OT network to Priva-hosted cloud services communications.  Priva's hybrid on-prem/multi-cloud platform applications security, including applications, infrastructure, CI/CD pipelines.   What makes this role truly unique is that our products contain long-lived hardware components that our customers run for years. Engineering future-proofed security solutions and maintaining a security posture at existing sites across all these areas having wide range of varying implementations and security needs creates a great challenge and a great fun.  As part of the architecture team, you will play a key role in shaping the future of Priva's portfolio offered on the global market. You define security standards, security practices and security designs for our products that are used in tens of thousands of buildings and greenhouses. You work across product, engineering, and operations teams to ensure security controls and adhered to, implemented and tested as you have designed these. That’s real impact.  What you will be doing   As a Security Architect, you have a very simple mission: you see to it that Priva's hardware products and software (cloud) services are secured against known and emergent threats in lines with the industry standards and practices. You build upon your strong background in securing device/OT networks, cloud applications, and engraining the security practices in the daily work of Agile teams to achieve consistent security posture across all Priva products, designs, and customer deployments.   As a security architect, you are trusted counterpart of Priva Security, Quality, and Compliance officer to define, review, and execute controls arising from ISO9001 and ISO27001 standards and internal initiatives. You are responsible for presenting the necessary evidence of Priva’s compliance with these controls to the auditors.  Security standards, policies, and design patterns library  Security architecture review process  Risk register and residual risk acceptance documentation  Periodic product security implementation reviews, including maintaining non-compliance register  Defined requirements, products and work packages for security-focused projects with 3rd party service providers, reviewing and accepting their deliverables, and supervising the implementation of these deliverables in the Priva hardware products and software services.  Regulatory compliance (IEC 62443, ISO 27001, ISO 9001 or other standard that may be applicable in specific geographies)  Threat intelligence briefing relevant to OT/IoT threat landscape  Designing, implementing, and reviewing security controls applied at major customer sites.  Above all, this is a hands-on role – occasionally writing code is included. You connect the industry’s best practices, ISO standards, product vision with the daily work of the product team. As a security architect, you practice what you preach. You explain, coach, and show by example the implementation of security as Secure SDLC in the developer’s daily work.   To succeed in this role: