Director, Information Security Assurance

About the role

AVEVA is seeking a Director to lead its Security Assurance function within the central Digital Security organization. This senior second‑line position is responsible for independently testing security controls and providing objective evidence for risk assurance across the company and its parent Schneider Electric.

Key responsibilities

• Operate the central second‑line assurance function, delivering independent testing of security controls.
• Connect assurance findings to the risk register and governance processes.
• Develop and evolve a scalable, automated, data‑driven assurance capability.
• Collaborate with GRC and federated control owners to close the loop between testing and governance.
• Provide strategic counsel to business leaders, the CISO, and senior peers.
• Contribute to policy development and drive a culture of performance excellence.

Required profile

• 10+ years of experience in information security, with at least 5 years in a senior audit/assurance role.
• Proven track record building and leading assurance or audit teams in complex, international environments.
• Experience designing and operating assurance programmes across IT, cloud, and product security.
• Direct exposure to external audit and certification processes such as ISO 27001 and SOC 2.

Required skills

• ISO 27001
• SOC 2
• Cloud security
• IT security
• Product security
• GRC (Governance, Risk, and Compliance) frameworks

What we offer

• Opportunity to shape a critical security function in a fast‑growing software company.
• Leadership role within a global, highly regulated market.
• Collaborative environment with senior stakeholders.