{"id":2480087,"url":"https://alion.io/job/inductive-automation-sdlc-security-and-compliance-lead","title":"SDLC Security and Compliance Lead","company":{"id":5793,"name":"Inductive Automation","domain":"inductiveautomation.com","url":"https://alion.io/company/inductiveautomation","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Legal","role_family":"Legal","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":163000,"max":180000,"currency":"USD","period":"year","gross":null,"usd_annual":180000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CVE","optional":false},{"name":"Incident Management","optional":false},{"name":"ISO 27001","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-10-13T20:26:13Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-22T15:19:49Z","board_verified":true,"closed_at":null,"days_open":8,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":8},"description":"Job Description\nThe Software Development Life Cycle (SDLC) Security and Compliance Lead defines, refines processes, and documents standards to ensure Inductive Automation's software development lifecycle meets certification and regulatory obligations. As the working lead for International Electrotechnical Commission (IEC 62443-4-1), this role aligns the standards with Inductive Automation’s practice, owns the Software Engineering process document family, tracks emerging and upcoming security requirements (e.g., IEC 62443-4-2, European Union (EU) Cyber Resilience Act (CRA)), and represents Software Engineering in compliance audits, company certifications, and compliance efforts (International Organization for Standardization (ISO) 9001, ISO 27001, CRA conformity assessment). This role helps define and sets standards within Software Engineering and ensures processes are documented; it does not implement technical measures. It is responsible for demonstrating compliance, including readiness checks, evidence preparation, and audit and certification support. Additionally, this role owns Software Engineering's portion of the Coordinated Vulnerability Disclosure (CVD) and incident management program alongside the IT/Cyber divisions. Responsibilities include maintaining playbooks, maintaining Incident Management qualification and training, and coordinating the Common Vulnerabilities and Exposures (CVE) lifecycle through disclosure, including Cybersecurity and Infrastructure Security Agency (CISA) and European Union Agency for Cybersecurity) ENISA reporting readiness. Across all duties, the lead ensures engineering personnel are trained and compliant with defined processes. This is a full-time role with hybrid and remote opportunities available.\nResponsibilities\nServing as subject matter expert and working lead for IEC 62443 certifications; owning the gap between the standard's requirements and Inductive Automation practice\n\nMonitoring practice changes in Development and Quality Assurance that could create compliance drift; supporting corrective actions and nonconformance activities\n\nTracking security roadmap and EU Cyber Resilience Act product-level requirements\n\nSupporting external security and compliance requirements as needed / requested (e.g. Life Sciences, automotive, aerospace, Dept of Defense, US/EU law or regulation, etc).\n\nParticipating in ISO and CRA conformity audits as the Software Engineering representative; prepare and maintain auditable evidence (tickets, code reviews, QA records)\n\nCoordinating on third party penetration testing; incorporating results into the SDLC ticket process\n\nOwning day-to-day currency of process documents. Maintains the mapping between committed standards (e.g. 62443, ISO 27001) practices and QMS documentation\n\nMaintaining SDLC traceability from code change through reviews, tests, requirements, and customer tickets\n\nVerifying Release Checklist completion as compliance evidence for all production software, including hotfixes\n\nResponsible for the Software Engineering portion of the Coordinated Vulnerability Disclosure and incident management program, in coordination with other stakeholders; keeps the playbook and process documentation current, with awareness of reporting requirements.\n\nMaintaining Incident Manager qualification and training for Software Engineering personnel with defined CVD roles; drive post-incident lessons learned into process and training\n\nSupporting Ignition Coordinated Vulnerability Disclosure. Coordinating with CISA/National Vulnerability Database (NVD), communicating with external researchers and stakeholders, and managing disclosure and release timing; supporting ENISA reporting requirements per compliance with the EU Cyber Resilience Act\n\nRunning internal readiness checks and pre-audit gap assessments; tracks personnel qualification\n\nIdentifying training gaps and coordinate delivery with engineering managers and leadership\n\nConsulting on Threat Modeling and participating in related activities\n\nRequirements\nTechnical Bachelor's Degree required (computer science, engineering, software development, or cybersecurity)\n\nRelevant Master's Degree or demonstrated equivalent experience required\n\nCybersecurity certification or equivalent demonstrated experience required (CISSP, GICSP, or ISA/IEC 62443 Cybersecurity Expert)\n\nExperience (8 years required; 15+ years preferred)\nSoftware development experience (not necessarily writing code; design, testing, assurance, management, etc); agile preferred.\n\nExtensive security or compliance audit experience (required); ISO Lead Auditor or equivalent with experience\n\nExtensive experience with policy and process documentation (required)\n\nDelivering software in controlled or regulated environment\n\nIncident management or coordinated vulnerability disclosure program experience\n\nCommunicating with and presenting to executive leadership\n\nPreferred, but not required:\nExperience achieving IEC 62443-4-1 or 62443-4-2 certification, or equivalent\n\nExperience with EU Cyber Resilience Act, or equivalent\n\nThreat modeling experience is strongly preferred\n\nAbout Us\nWho are we?\nChampions for industrial automation innovation and driven by a mission statement to empower our customers to swiftly turn great ideas into reality by removing all technological and economic obstacles, we create and deliver solutions that relieve pain points, bring efficiency to operations and optimize integration.\nWhy Choose Inductive Automation?\nOur passion goes beyond customers. We celebrate your personal and professional milestones, and we support our teams with meaningful work in a collaborative environment.\nWe find that great work-life balance inspires teams to do their best work and empowers people to live their best lives. That's why diversity, fun, and flexibility are ingrained into our work culture.\nThe Inductive Automation team understands the importance of personal growth and social connection. So things like time for professional development, or company and team activities are baked right into the schedule to keep us all engaged, connected, and prospering.\nBenefits and Perks\n100% Employee Covered Health Care: Don’t pay a dime for your medical, dental, and vision insurance\n\nPaid Time Off: Receive paid holidays, vacation, and sick time\n\n401k with Match: Save for the future with our company-matching 401k program\n\nWorld-Class Headquarters: While on-site, enjoy complimentary snacks and beverages, then challenge a friend to a game of pool, table tennis, shuffleboard, or foosball\n\nAdjacent Nature Reserve: On-site employees enjoy breathtaking views and adventures that energize and inspire\n\nAdditional Information\nAt this time, we are unable to offer employment for individuals located outside of the United States and/or those who require sponsorship for employment visa status (e.g., H-1B visa status). We know you've got a lot of options when seeking an employer where your skills and talents will shine, so we really appreciate that you considered us.\nInductive Automation, LLC is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, age, sexual orientation, gender identity, and status as a protected veteran or individual with a disability. Verification of US employment eligibility required.","description_format":"text","description_chars":7378,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Professional development","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Industrial Automation","Information Security","Industrial IoT (IIoT)","Manufacturing & Industrial Software"],"lifecycle":[{"event":"open","at":"2026-10-13T22:30:28Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":8,"expected_fill_days":74,"reasons":["conf:1","win:early"],"computed_at":"2026-10-22T06:10:10Z"},"pay":{"stated_usd_annual":180000,"is_top_pay":true},"html_url":"https://alion.io/job/inductive-automation-sdlc-security-and-compliance-lead","json_url":"https://alion.io/job/inductive-automation-sdlc-security-and-compliance-lead.json","meta":{"generated_at":"2026-10-22T17:15:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18128,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5793},"rest":"https://alion.io/mcp/rest/get_company?id=5793"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finductive-automation-sdlc-security-and-compliance-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finductive-automation-sdlc-security-and-compliance-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finductive-automation-sdlc-security-and-compliance-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/inductive-automation-sdlc-security-and-compliance-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finductive-automation-sdlc-security-and-compliance-lead"}]}