Responsibilities, authorities and accountabilities - Accountable for the strategy and execution of our security development lifecycle (SDL) program across all Baker Hughes products.
- Lead Baker Hughes product and application security function, including planning and development of the company's security strategy in support of the strategic business plan.
- Driving best-in-class product and application security standards and frameworks.
- Focus on SDL, client data encryption and protection, cloud security, key management and code signing, and product and application incident and vulnerability management.
- Identifying security technologies and trends ensuring Baker Hughes products and operating environments keep pace with technological changes and innovation.
- Defining and executing product and application security communication, training and awareness programs.
- Hiring and developing the product and application security team to grow to the next level of maturity and scalability.
- Produce operational metrics to highlight trends and detail organizational effectiveness.
- Collaborating with IT and engineering teams to design and implement security controls that enable business initiatives and reduce risk in our products and applications.
- Be able to build strong partnerships with stakeholders across Baker Hughes diverse engineering functions, leverage strong interpersonal skills to ensure the product and application security team is business enabler and doesn't stifle engineering innovation.
- Define strategic secure development lifecycle roadmap and associated time frames and barriers to entry for methodically improving Baker Hughes secure development practices and enabling market differentiation.
- Leads analytical and design activities using proven technologies and vested approaches and methods.
- Supports sales project. Develops technical solutions which fit the needs of a client. Sales process require combining proven technologies and existing solutions.
- Shares knowledge acquired in concrete projects.
Required Qualifications - Bachelor's degree in related discipline (Information Systems, Computer Science or related field)
- Certifications in one or more of the following, CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), etc., highly desirable.
- 10+ years of cyber and information security experience
- 6+ years of supervisory experience, at least 2 years at Director level or higher
- 5+ years of software development
- Experience in penetration testing / red team / vulnerability assessment
- Advanced working knowledge of cyber and information security standards, frameworks, technologies, control strategies, compliance practices
- Strong verbal and written communication skills, excellent judgment and interpersonal skills
- Experience in managing diverse security functions in a global capacity
- Experience in delivering large, multi-faceted security programs at a global enterprise scale
- Detailed knowledge of security domains and common security controls
- Expertise in common system, software and web application vulnerabilities (e.g., OWASP Top 10)
- Able to deliver quality results in a high-energy/high-pressure environment
- Ability to multi-task and manage demands of many projects, issues, and tasks
Desired Characteristics - Strong oral and written communication skills. Strong interpersonal and leadership skills. Demonstrated ability to analyze and resolve problems. Demonstrated ability to lead programs / projects. Ability to document, plan, market, and execute programs. Established project management skills.
About Us: We are an energy technology company that provides solutions to energy and industrial customers worldwide. Built on a century of experience and conducting business in over 120 countries, our innovative technologies and services are taking energy forward - making it safer, cleaner and more efficient for people and the planet.
Join Us: Are you seeking an opportunity to make a real difference in a company that values innovation and progress? Join us and become part of a team of people who will challenge and inspire you! Let's come together and take energy forward.
Baker Hughes Company is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law.