Product Security Lead: Regulatory Risk & Strategy

Mondeadditif; Heverlee; On-site; EUR 90,000 - 140,000; Full time

Job summary

Materialise Software is seeking a Product Security Lead to own the security posture of our products, translating regulations and customer expectations into clear priorities for product and engineering teams.

You will drive risk-based decisions, collaborate with cross-functional leaders, and guide the development of security strategy and roadmap to ensure compliance and trusted delivery.

Qualifications

• Strong understanding of product and cloud security in modern DevOps environments.
• Experience working with security regulations and frameworks (ISO 27001, NIS2, SOC 2, NIST, FedRAMP, or similar).
• Proven ability to make and defend risk-based decisions.
• Credibility with senior engineering and product stakeholders.
• Clear written and verbal communication, especially around trade-offs.

Responsibilities

• Oversee the overall product security posture across the portfolio (CO-AM Platform, Magics).
• Interpret security legislation, standards, and customer requirements.
• Define product security objectives and non-functional requirements.
• Lead risk acceptance and exception management.
• Develop product security strategy, roadmap, and prioritization.
• Maintain external security posture toward customers, auditors, and regulators.
• Align security priorities with product and engineering planning cycles.
• Collaborate with Product Management, Engineering Management, DevSecOps, Security Architecture, and CISO.

Skills

Product security

Cloud security

DevSecOps

Regulatory frameworks

Risk-based decisions

Stakeholder credibility

Communication

Job description

Materialise Software is seeking a Product Security Lead to own the security posture of our products, translating regulations and customer expectations into clear priorities for product and engineering teams.

You will drive risk-based decisions, collaborate with cross-functional leaders, and guide the development of security strategy and roadmap to ensure compliance and trusted delivery.