Principal Cybersecurity Officer (PCSO) Hub China

Siemens Energy

Siemens Energy and Siemens Gamesa are becoming Omterra. "We energize society" by supporting our customers to make the transition to a more sustainable world, based on innovative technologies and our ability to turn ideas into reality. With nearly 100,000 employees around the world, we shape the energy systems of today and tomorrow.

Learn more about Siemens Energy

Principal Cybersecurity Officer (PCSO) Hub China

About the Role

Job ID

304766

Location

China

Shanghai Shi

Shanghai

Remote vs. Office

Hybrid (Remote/Office)

Company

Siemens Energy Co., Ltd.

Organization

EVP Global Functions

Business Unit

Cybersecurity

Full / Part time

Full-time

Experience Level

Professional / Experienced

A Snapshot of Your Day

As Principal Cybersecurity Officer (PCSO) for Hub China, you will drive cybersecurity across Siemens Energy’s products, solutions, services, production sites and business-managed IT from a regional perspective with a focus on core governance enforcement as well as legal compliance. You will represent cybersecurity holistically for Siemens Energy’s operations, factories and business areas in the country. You will enable Siemens Energy’s operations, products and solutions in China to comply with Chinese cybersecurity laws, regulations and standards, monitor and interpret evolving legislation, translate requirements into effective security practices, and maintain key relationships with relevant authorities. You will also own the operational cybersecurity activities for China, including vulnerability management, risk assessments, asset protection and factory cybersecurity support. You will serve as a trusted advisor across the organization, bridging legal obligations and technical implementation.

How You’ll Make an Impact

• Actively drive the cybersecurity strategy from a Cybersecurity core governance perspective and enable cybersecurity resilience, governance and regional management with customized
• cybersecurity strategies for Regional Hub. Understands stakeholders’ business demand for cybersecurity and drives its delivery from a regional perspective.
• Act as the senior cybersecurity representative for Siemens Energy in China, setting local priorities in line with global strategy, advancing cybersecurity objectives together with local stakeholders and translating them into an actionable regional plan.
• Serve as the single point of contact for cybersecurity demand in China: prioritize and route business requests, coordinate responses with internal and external experts and track topics to closure.
• Proactively anticipates risks and opportunities and provides standardized core governance reporting to senior management of respective areas on regular basis with respect to Cybersecurity Governance, Risk, Compliance and Maturity. Monitor changes and amendments to China’s cybersecurity laws, regulations and standards, ensuring the organization remains up to date with the latest compliance requirements.
• Translate legislative and regulatory requirements into actionable cybersecurity practices for business operations, products and solutions, and communicate the impact and required actions to all business areas.
• Maintain contact with Chinese cybersecurity authorities, coordinate required compliance reporting or audits and represent Siemens Energy’s position, including participation in relevant standardization and technical committee activities.
• Ensure internal management systems, IT applications and business processes are aligned with Chinese cybersecurity laws to maintain compliance and support secure and stable operations.
• Provide guidance for product, system and solution security compliance, working with R&D and engineering teams so that products and services for the Chinese market are designed and maintained in line with national laws and technical standards.
• Coordinate the handling of cybersecurity incidents and vulnerabilities together with the Incident Management team, ensuring effective mitigation and timely fulfilment of legal reporting obligations.
• Support customer-facing cybersecurity requests, including questionnaires and evidence, together with sales, bid and project teams.
• Coordinate vulnerability management for China: validate ownership of findings, drive remediation with technical owners, escalate overdue items and report status and closure evidence.
• Support cybersecurity business impact assessment and asset protection for local operations, following up on treatment actions and documenting decisions.
• Support Siemens Energy factories together with local Industrial Cybersecurity Officers within the global governance framework and in alignment with global ICSOs and BA PCSOs: engage factory management, deliver shopfloor cybersecurity awareness and coordinate activities such as penetration tests and cyber drills, including follow-up on findings.
• Promote a culture of cybersecurity by developing and delivering targeted awareness and training for management, engineering, sales and shopfloor audiences, so that stakeholders understand their responsibilities under China’s cybersecurity and product security requirements.

What You Bring

• Bachelor’s degree in information security, Cybersecurity, Computer Science, Law or a related field.
• Experience in strategic cybersecurity leadership, governance and risk advisory.
• Experience in operational cybersecurity activities such as vulnerability management, exception handling, risk assessments or industrial cybersecurity.
• Strong technical background and proven experience in cybersecurity compliance, covering both enterprise-level (policy/process) and product security, with experience in China being a must.
• Strong knowledge of Chinese cybersecurity laws, regulations and the broader regulatory landscape, including relevant national and industry standards and certification requirements. Familiarity with CIIO requirements and technical committee participation is a plus.
• Ability to interpret