Security & Compliance Architect

**Job Description:** As a PLM Security Architect at Siemens Energy, you will be responsible for securing Product Lifecycle Management systems throughout their lifecycle. Your role involves designing and implementing security architectures to ensure strong access control, data protection, and compliance with industry standards. By collaborating with Asset Owners, IT, compliance, and business teams, you will translate security principles into scalable solutions that safeguard sensitive product data and support operational goals. **Key Responsibilities:** - Design, define, and maintain the overall security architecture for PLM systems in alignment with organizational security policies and industry best practices. - Define and act as a consulted authority for authorization concepts within PLM systems, applying need-to-know and least-privilege principles. - Consult Asset Owners on access control approaches such as Role-Based Access Control (RBAC) and detail roles, privileges, and account management processes. - Establish and govern a comprehensive access control framework covering standard, privileged, and administrator accounts, including account creation, modification, and deletion. - Implement data protection measures to secure sensitive product data throughout design, manufacturing, and distribution phases. - Ensure compliance with data privacy regulations applicable to PLM systems and data handling. - Oversee lifecycle management of privileged accounts, ensuring correct assignment, modification, and removal of identities. - Enforce two-factor authentication for privileged and service accounts in accordance with security protocols. - Define formal processes for assigning and revoking access rights, ensuring traceability and Asset Owner approval. - Ensure immediate removal or adjustment of access rights upon termination, contract end, or departmental changes. - Develop and maintain incident response plans and procedures for PLM environments. - Conduct risk assessments and threat modeling to identify vulnerabilities and threats, and define appropriate mitigation strategies and security controls. - Collaborate with Asset Owners and Asset Managers to define operational requirements and approval workflows. **Qualifications Required:** - At least 7 years of experience in IT security, with a minimum of 5 years focused on PLM security architecture and access control. - Bachelor's degree in Computer Science, Information Technology, or a related field; a Master's degree is preferred. - Proven experience developing and managing authorization concepts and access control frameworks within PLM systems. - In-depth understanding of PLM security architecture, including user roles, authorizations, and access control mechanisms. - Hands-on experience configuring and managing security settings and roles within PLM platforms such as Siemens Teamcenter, PTC Creo, or NX. - Proficiency in Role-Based Access Control (RBAC) and other relevant access control models. - Familiarity with PLM security best practices and compliance requirements, including ISO 27001 and NIST. - Knowledge of application security concepts and experience with scripting or automation for PLM security tasks. - Strong analytical, problem-solving, verbal, and written communication skills. (Note: Omitted additional details about the company for brevity) **Job Description:** As a PLM Security Architect at Siemens Energy, you will be responsible for securing Product Lifecycle Management systems throughout their lifecycle. Your role involves designing and implementing security architectures to ensure strong access control, data protection, and compliance with industry standards. By collaborating with Asset Owners, IT, compliance, and business teams, you will translate security principles into scalable solutions that safeguard sensitive product data and support operational goals. **Key Responsibilities:** - Design, define, and maintain the overall security architecture for PLM systems in alignment with organizational security policies and industry best practices. - Define and act as a consulted authority for authorization concepts within PLM systems, applying need-to-know and least-privilege principles. - Consult Asset Owners on access control approaches such as Role-Based Access Control (RBAC) and detail roles, privileges, and account management processes. - Establish and govern a comprehensive access control framework covering standard, privileged, and administrator accounts, including account creation, modification, and deletion. - Implement data protection measures to secure sensitive product data throughout design, manufacturing, and distribution phases. - Ensure compliance with data privacy regulations applicable to PLM systems and data handling. - Oversee lifecycle management of privileged accounts, ensuring correct assignment, modification, and removal of identities. - Enforce two-factor authentication for privileged and service accounts in accordance with