Overview Job Title : Product Security Manager
This is a pivotal role in safeguarding the company's reputation, protecting patient data, and maintaining trust with customers and stakeholders throughout the product lifecycle.
The Product Security Manager plays a crucial part in developing and implementing global security strategies, conducting risk assessments, overseeing security controls implementation, and ensuring compliance with industry standards and regulations.
Key Responsibilities : Develop a comprehensive end-to-end Secure Development Lifecycle, embedding cybersecurity and privacy by design in all products from pre-market to post-market.
Collaborate with cross-functional teams to develop a DevSecOps pipeline and culture.
Conduct third-party vendor and supply chain risk assessments to identify potential security threats and develop mitigation strategies.
Evaluate and ensure compliance with industry standards and regulations such as GDPR, HIPAA, NIST, and FDA cybersecurity guidelines.
Create and deliver training programs to educate employees on product security best practices.
Represent the company in industry forums and working groups related to product security.
Networking / Key Relationships : Company directors for strategic alignment and risk management.
Product Security Director and Data Privacy Officers to ensure alignment between company's security and privacy compliance programs.
Product Security Officers for process harmonization across business units.
Regulatory Affairs to define procedures for product security.
Engineering departments for Secure Development Lifecycle support.
Quality Assurance department for security testing support.
Minimum Requirements : Engineer or computer science degree, or equivalent work experience.
7+ years of product security experience, including at least 2 years in a leadership or management role.
3+ years of software development experience.
Skills & Capabilities : Strong analytical skills to identify and address security challenges and vulnerabilities.
Effective communication skills to convey complex cybersecurity concepts to technical and non-technical stakeholders.
Willingness to stay updated on the latest cybersecurity trends, threats, technologies, and regulations through continuous learning.
Ability to lead and collaborate with cross-functional teams to enhance overall cybersecurity posture.
#J-18808-Ljbffr
Cybersecurity Specialist • Barcelona, Catalonia, SPAIN