Privacy Engineer

Posit
Position Description
The Privacy Engineer supports the Energy Management Business Unit's (EMBU) global Data Privacy & Protection (DP&P) program, as a data privacy subject matter expert. This role is responsible for supporting product offers throughout Secure Development Lifecycle (SDL), by ensuring that products are designed and developed with the highest levels of Privacy-by-Design (PbD), in order to comply with corporate policy, regulatory requirements and market expectations. Additionally, the understanding of cloud architecture and related IoT concepts is essential to our continued migration to cloud-based solutions; many of which collect Personal Information (PI). The Privacy Engineer collaborates with the corporate Data Protection Officer (DPO) team, legal staff, and data privacy peers across other groups to promote standardization across our software and firmware-based hardware portfolios. The Privacy Engineer is responsible for communication and status reporting of data privacy initiatives within the BU, and is highly focused on understanding both the present and future state of evolving regulatory requirements, in order to assist in strategic planning, and customer support. These responsibilities shall align with BU directives and initiatives, in further alignment to corporate policy and global regulations, to promote uniformity and aid in reuse of intellectual property/concepts. The position reports to the BU's Chief Product Privacy Officer. The role provides advisement to senior cybersecurity team members in all DP&P related topics.
Preferred office location is Andover, MA or Franklin, TN; however, a candidate based in any U.S. state or EU member country should apply (remote location is considered).
Privacy Engineer Responsibilities
Data Privacy & Protection
Directly supports development & sustaining teams on DP&P requirements throughout SDL, to ensure products are compliant with PbD standards and global regulations
Monitors data privacy compliance in the Divisions and LoBs, and maintains an inventory of regulation-compliant/non-compliant offers; identifies gaps and risks via escalation to BU Privacy Officer
Interprets data privacy regulations relative to our product scope, use, market requirements, and integration specific considerations
Keeps current on global data privacy regulations via direct investigation and networking with both internal resources and external sources
Develops or specifies curriculum and regularly delivers data privacy training to the LoBs (line-of-businesses)
Addresses/coordinates data privacy responses to customer inquiries; maintains a FAQ database for reuse
Evaluates operational and roadmap impacts of current and developing data privacy legislation upon our BU offers
Assists with developing and continuously maturing BU DP&P program service capabilities
Assists with analysis of the DP&P positioning and capabilities of our competitors
Drives regular internal communications promoting data privacy proactivity within the BU; to LoB Offer Managers and Cybersecurity Leads
Authors procedures/guidelines for data privacy integration within the BU
Cloud & IoT
Keeps current on established and evolving cloud & IoT architectural concepts/standards
Brings a security & privacy point of view and filter in evaluating product-related cloud solutions
Considers the DP&P impacts to our cloud solutions
Primary cloud & IoT DP&P subject matter expert to offer teams; both development and sustaining
Aligns and coordinates the design and requirements of our BU cloud & IoT solutions with the Schneider Digital organization's directives, compliance program, and other initiatives
Tracks all cloud & IoT products for the BU in centralized repository, in order to regularly report compliance and risk management strategy across Divisions & LoBs; reports to BU management for analysis and remedial activities
Requirements
Education: 4-year technical degree in Information Assurance, Information Security, Computer Science, Information Technology, or related discipline; or equivlalent experience
IAPP CIPP, CIPM, CIPT, or equivalent certification(s); EU expertise is a plus
Demonstrated knowledge on various data privacy regulations; country, regional, and market segment-specific standards/specifications (ie: GDPR, CCPA, PIPL, ePrivacy, etc.); PbD expertise is a plus
CCSK, CCNA, CCSP, MCSE, or equivalent certification(s)
5+ years of experience in technical/development project management
3+ years of experience in Industrial Control System products, or similar market
Knowledge of cloud implementations and IoT products, related standards, and other best practices
Languages: English; French is a plus
Must be able to pass a background check
Must be able to travel domestically and internationally (20-25%)
Why us?
Schneider Electric is leading the digital transformation of energy management and automation. Our technologies enable the world to use energy in a safe, efficient and sustainable manner. We strive to promote a global economy that is both ecologically viable and highly productive.
₠25.7bn global revenue
137 000+ employees in 100+ countries
45% of revenue from IoT
5% of revenue devoted for R&D
You must submit an online application to be considered for any position with us. This position will be posted until filled
It is the policy of Schneider Electric to provide equal employment and advancement opportunities in the areas of recruiting, hiring, training, transferring, and promoting all qualified individuals regardless of race, religion, color, gender, disability, national origin, ancestry, age, military status, sexual orientation, marital status, or any other legally protected characteristic or conduct. Concerning agencies: Schneider Electric does not accept unsolicited resumes and will not be responsible for fees related to such.