Product Security Leader: Strategy, Risk & Compliance

MAT CZE Materialise SRO; Vlaams-Brabant; On-site; EUR 90,000 - 130,000; Full time

Job summary

Materialise Software is seeking a Strategic Product Security Lead to own the security posture of our software products, including CO-AM Platform and Magics. You translate regulations and customer expectations into clear decisions and roadmaps, guiding product and engineering teams to secure delivery at scale.

You will collaborate with Product Management, Engineering, DevSecOps, and Security Architects to define security objectives, manage risk, and ensure compliance with ISO 27001, NIS2, and

Qualifications

• Strong understanding of product and cloud security in modern DevOps environments.
• Experience with security regulations and frameworks (ISO 27001, NIS2, SOC 2, NIST, FedRAMP, or similar).
• Proven ability to make and defend risk-based decisions.
• Credibility with senior engineering and product stakeholders.
• Clear written and verbal communication, especially around trade-offs.

Responsibilities

• Oversee product security posture across the portfolio (CO-AM Platform, Magics).
• Interpret security regulations and customer requirements; define pragmatic compliance scope.
• Define product security objectives and non-functional requirements; manage risk acceptance and exceptions.
• Develop security strategy, roadmap, and prioritization aligned with business goals.
• Collaborate with Product Management, Engineering, DevSecOps, Security Architect, and CISO to align decisions with enterprise risk posture.

Skills

Product security

Cloud security

Risk-based decisions

Regulatory frameworks

Security governance

Job description

Materialise Software is seeking a Strategic Product Security Lead to own the security posture of our software products, including CO-AM Platform and Magics. You translate regulations and customer expectations into clear decisions and roadmaps, guiding product and engineering teams to secure delivery at scale.

You will collaborate with Product Management, Engineering, DevSecOps, and Security Architects to define security objectives, manage risk, and ensure compliance with ISO 27001, NIS2, and