Head of Digital Workplace Security & Governance

Job description

A Snapshot of Your Day As the Head of Digital Workplace Security & Governance, you will lead the global strategy, governance, security, compliance, and operational excellence of Siemens Energy's digital workplace ecosystem. You will ensure that workplace technologies are secure by design, compliant by default, and enable a productive employee experience across a globally distributed workforce. You will partner closely with Digital Workplace, Cybersecurity, IAM, Network, Privacy, Legal, HR, Architecture, and Operations teams to establish security guardrails, governance frameworks, and engineering standards that protect enterprise assets while enabling innovation. You will lead a globally distributed team responsible for endpoint security, compliance, workplace governance, vulnerability management, audit readiness, and digital workplace security transformation initiatives. How You'll Make an Impact Leadership & Strategy • Define and execute the global Digital Workplace Security & Governance strategy aligned with Siemens Energy's cybersecurity and business objectives. • Lead and develop a globally distributed team of security, governance, and endpoint engineering professionals. • Establish clear operating models, accountability frameworks, and governance practices across regions and product teams. • Drive workplace-security modernization and continuous improvement initiatives while ensuring stable operational delivery. Security Governance & Compliance • Translate enterprise security policies into implementable standards, controls, engineering requirements, and measurable outcomes. • Define and maintain workplace-security baselines, golden configurations, governance policies, and compliance frameworks. • Ensure alignment with regulatory, privacy, legal retention, and audit requirements across multiple jurisdictions. • Manage risk acceptance processes, segregation of duties, control attestation, and exception governance. Endpoint & Workplace Security • Lead governance and security oversight for endpoint management, endpoint protection, detection capabilities, encryption, and device compliance. • Drive risk-based vulnerability and patch management programs across workplace technologies. • Ensure effective configuration management, endpoint hardening, and control automation. • Establish measurable security posture indicators and compliance reporting mechanisms. Microsoft 365 & Collaboration Governance • Govern Microsoft 365 and workplace collaboration platforms, including: • Tenant security • External sharing and guest access • Collaboration governance • Plugins and connectors • Information protection controls • AI-enabled workplace features • Ensure secure adoption of collaboration technologies while maintaining compliance and user productivity. Incident Response & Operational Excellence • Provide leadership during workplace-security incidents, cyber events, and compliance breaches. • Partner with SOC and CSIRT functions to ensure timely containment, recovery, evidence preservation, and corrective actions. • Ensure findings from incidents, audits, and assessments are translated into sustainable operational improvements. • Maintain accountability for control effectiveness and production implementation of remediation activities. Service Governance & Vendor Management • Partner with service owners to integrate security controls into workplace services throughout their lifecycle. • Oversee workplace-security technology providers, managed service partners, and vendor performance. • Drive tool rationalization, knowledge transfer, service quality improvement, and cost optimization. • Promote observability, Digital Employee Experience (DEX), and ITSM/CMDB integration to balance security, reliability, and usability. What You Bring Essential Experience & Capabilities • Typically 10+ years of experience across Digital Workplace, Endpoint Engineering, Cybersecurity, Security Architecture, Governance, or related infrastructure domains. • Significant experience leading global or distributed teams in enterprise environments. • Proven success leading workplace-security, endpoint-compliance, cyber-governance, or security-engineering organizations through transformation and operational maturity. • Strong expertise in: • Unified Endpoint Management (UEM) • Endpoint Protection & Detection • Operating System and Application Lifecycle Management • Encryption and Trust Services • Data Privacy & Legal Retention Requirements • Experience governing collaboration and productivity platforms, including Microsoft 365 security and compliance controls. • Demonstrated success improving vulnerability management, patch compliance, audit readiness, and security-control effectiveness. • Strong understanding of: • Zero Trust principles • Identity & Access Management • Secure Access • Data Protection • Privacy Regulations • Enterprise Risk Governance • Segregation of Duties • Experience supporting security incidents and cyber-response activities in partnership with SOC/CSIRT teams. • Strong knowledge of: • IT Service Management (ITSM) • CMDB • Service Ownership • Observability • Digital Employee Experience (DEX) • Proven ability to influence senior stakeholders across business and technology organizations without direct authority. • Fluent English with experience leading global teams across different cultures, geographies, and time zones. Preferred Qualifications • Experience within industrial, energy, manufacturing, critical infrastructure, or other highly regulated global enterprises. • Leadership experience in large-scale Digital Workplace, Microsoft 365, Endpoint Management, Data Privacy, or Secure Workplace transformation programs. • Knowledge of employee-data privacy regulations, works-council engagement, cross-border service delivery, and regional compliance requirement