Product Security Officer developing and maintaining Product Security Management Systems while coordinating a global team. Overseeing cybersecurity requirements and collaborating with diverse stakeholders.
Responsibilities
Develop, implement and maintain the Product Security Management System (PSMS)
Build the international team for this function
Develop a product security concept for products, taking into account threat landscapes as well as company and technology strategy
Advise development projects on cybersecurity requirements
Lead and coordinate the globally distributed PSIRT (Product Security Incident Response Team)
Manage the Coordinated Vulnerability Disclosure (CVD) process
Monitor and implement relevant regulatory requirements, with a focus on the Cyber Resilience Act
Contribute to standardization efforts in standards committees and industry associations
Conduct regular threat analyses and oversee penetration tests
Play a key role in internal training to transfer knowledge into the organization
Collaborate with internal and external stakeholders to ensure a holistic security approach
Requirements
University degree, ideally in IT security, computer science, (industrial) engineering or a comparable field
Several years of professional experience, preferably in the relevant field
Extensive knowledge of current security technologies, encryption methods, authentication mechanisms and network security
Knowledge of process management and security standards such as ISO/IEC 27001 and IEC 62443
Familiarity with regulatory frameworks such as the Cyber Resilience Act (CRA) and NIS2
Strong communication and planning skills
Strategic thinking and a high degree of self-initiative
Very good German and English language skills, both written and spoken
Experience leading interdisciplinary teams is an advantage
Strong alignment with our company values: Long-term thinking, Committed to excellence, Always respectful, Passionate about customers
Benefits
Company bike (JobRad)
30 days vacation
Holiday and Christmas bonus
Capital-forming payments (employer contributions to savings plans)
Excellent working atmosphere
Tailored onboarding
Regular team events
Modern, clean production environment
Short decision-making paths thanks to flat hierarchies
Flexible working hours (flextime)
Internal departmental training plan
Varied and responsible tasks in an international company
Security and Privacy SME at Dynanet Corporation responsible for data management compliance and governance guardrails. Ensuring secure data handling and adherence to federal regulations.
PAM Manager responsible for strategy, roadmap, and operations of PAM program at Intact. Leading a team to safeguard privileged identities and secrets across various environments.
Senior Cybersecurity Vulnerability Management Versatilist at Boeing. Protecting the IT ecosystem by innovating vulnerability management solutions and leading security initiatives.
Entry level Associate Security Engineer at Navy Federal securing technical infrastructure and workloads with operational capabilities and threat monitoring practices.
Machine Learning Researcher focusing on innovative AI and intelligent automation for cybersecurity. Driving research in Agentic AI and collaborating with cross - functional teams for production - grade features.
EHS - Management expert overseeing environmental, health, and safety compliance at ZF. Collaborating with teams to foster a safe work culture and manage regulatory compliance.
Cybersecurity Lead - Product Security at Celestica securing network hardware and operating systems. Lead the 'Secure by Design' principles and operationalize standardized SDLC within product engineering teams.
Senior Technical Lead architecting and securing multi - cloud environments for Celestica. Leading cloud security projects focusing on Google Cloud, Azure, and Google Workspace.
Senior Technical Lead responsible for architecting and implementing global network security solutions. Collaborating with internal and external teams to meet cybersecurity requirements for Celestica.
Senior Manager of Information Security at Celestica overseeing cybersecurity policies and practices. Requires extensive experience in threat hunting, control validation, and security architecture reviews.