AVEVA is creating software trusted by over 90% of leading industrial companies.
Job Title: Director, Information Security - Assurance
Location: Cambridge | UK
Employment type: Full-time regular
Previous Experience: 10+ years in information security with at least 5 years in a senior role biased towards building audit/assurance capability, not just running it. Proven track record of building and leading assurance or audit teams in complex, international and multi-stakeholder environments. Experience designing and operating controls assurance programmes spanning IT, cloud, and product security domains, with direct exposure to external audit and certification processes (ISO 27001, SOC 2).
The job
The Director, Information Security - Assurance leads AVEVA’s Security Assurance function within the central Digital Security organization a critical second-line leadership role in AVEVA’s federated security model. This role is accountable for independently testing whether AVEVA’s security controls are operating as designed, providing the objective evidence that underpins the risk assurances given to AVEVA leadership and Schneider Electric, and connecting assurance findings directly to the risk register and governance process.
AVEVA is a fast-growing software company operating in highly regulated markets and is an independent subsidiary of Schneider Electric. The Assurance function must be a scalable, continuously improving capability; evolving beyond point-in-time testing towards automated, data-driven assurance that provides real-time visibility into control effectiveness across the AVEVA estate.
We are building a highly integrated security practice, where all security disciplines share and act in coordination on risk signal. The successful candidate must combine deep technical assurance expertise with a collaborative mindset, working closely with the GRC function to close the loop between testing and governance, and with federated teams who own the controls being assessed. They will bring analytical rigour, a passion for automation, and the courage to surface findings clearly and honestly.
As a senior leader, and member of the functional SLT, the Director of Security – Assurance will routinely be called on to provide consultation to business leaders, and counsel to the CISO and peers. They are responsible for generating new theories, concepts, principles and methodologies and will contribute significantly to the development of policy for the Digital Security function. As a leader of leaders, this individual must establish a culture of performance excellence, ensuring the team reflect the demands and expectations of the business, our internal and external stakeholders, in accordance with AVEVA’s values.
Key Responsibilities
Operating as the central second-line assurance function, the Director provides independent testing and validation of controls across all federated teams. Assurance findings feed directly into the GRC risk register and governance process, and support the external audit and certification programme ensuring AVEVA can evidence its security posture to customers, regulators, and Schneider Electric.
Skills and Experience
Desired/Preferred
Competencies
Digital Security at AVEVA
Our Digital Security organization is responsible for protecting AVEVA’s digital estate and products across a federated security model. We are building a highly integrated security practice where all security disciplines share and act in coordination on risk signal, enabling AVEVA to operate securely in highly regulated markets as an independent subsidiary of Schneider Electric.
We pride ourselves on a collaborative, inclusive and authentic culture that provides a framework allowing for autonomy, whilst always being available for support and guidance. We respect the differences that each team member brings and seek to include those perspectives in our solutions for our business functions. The energy and sense of purpose is evident when talking to team members, you will feel part of something special from the first day you join.
#LI-DY1
UK Benefits include:
Flexible benefits fund, emergency leave days, adoption leave, 28 days annual leave (plus bank holidays), pension, life cover, private medical insurance, parental leave, education assistance program.
It’s possible we’re hiring for this position in multiple countries, in which case the above benefits apply to the primary location. Specific benefits vary by country, but our packages are similarly comprehensive.
Find out more: aveva.com/en/about/careers/benefits/
Hybrid working
We work in a hybrid way at AVEVA. Most roles are based at a local AVEVA office, with an expectation of being on-site 50% of your working hours to support collaboration and connection. Some positions are fully office-based depending on the nature of the work, and certain roles that support specific customers or markets may be remote. The working arrangement for this position will be confirmed during the hiring process.
Hiring process
Interested? Great! Get started by submitting your cover letter and CV through our application portal. AVEVA is committed to recruiting and retaining people with disabilities. Please let us know in advance if you need reasonable support during your application process.
Find out more: aveva.com/en/about/careers/hiring-process
About AVEVA
AVEVA is a global leader in industrial software with more than 6,500 employees in over 40 countries. Our cutting-edge solutions are used by thousands of enterprises to deliver the essentials of life – such as energy, infrastructure, chemicals, and minerals – safely, efficiently, and more sustainably.
We are committed to embedding sustainability and inclusion into our operations, our culture, and our core business strategy. Learn more about how we are progressing against our ambitious 2030 targets: sustainability-report.aveva.com/
Find out more: aveva.com/en/about/careers/