Head of Product Security (m/w/d)

SYSGO AG; Klein-Winternheim; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Offene Arbeitsatmosphäre

Festanstellung

Mobiles Arbeiten

Unternehmensevents

Fortbildung

Job summary

SYSGO AG in Deutschland sucht eine erfahrene Führungskraft im Bereich Product Security, die Strategie, Zertifizierungen und Teamführung verantwortet.

Sie steuern PSIRT-Operationen, koordinieren Vulnerability-Management und setzen Sicherheitsstandards in Embedded-Systemen um. Mobiles Arbeiten wird angeboten; Festanstellung in einem innovativen Umfeld.

Qualifications

• Langjährige Führungserfahrung in der Software-Sicherheit.
• Fundierte Kenntnisse in Sicherheitszertifizierungen (ISO 21434, IEC 62443, DO-178C/CC/EUCC o. CRA).
• Starke Fähigkeit, Sicherheitsstrategie intern und extern zu vertreten.
• Erfahrung mit eingebetteten Systemen und sicherheitskritischer Software.

Responsibilities

• Strategie und Leitung der Produkt-Sicherheit inkl. Budget- und Zertifizierungs-Roadmap.
• PSIRT-Betrieb von Vulnerability Intake bis Remediation koordinieren.
• Sicherheitsprozesse über Produktlinien hinweg harmonisieren und das Team weiterentwickeln.

Skills

security leadership

Vulnerability management

ISO 21434

IEC 62443

embedded systems

SBOM management

Tools

SBOM Formats

CycloneDX

Vulnerability tools

Job description

Your Tasks

Strategy and Leadership

• Define and drive the product security strategy regarding features and certification roadmap in consultation with the Head of Product Engineering and VP of Product Strategy & Innovation
• Own budget and resource planning for product security certification
• Harmonize security processes across product lines
• Lead and grow the product security team
• Sign the CE self-declaration on behalf of the organization

Vulnerability & Incident Response

• Own the PSIRT operations end to end: vulnerability intake monitoring, triage and validation, and remediation coordination with product engineering
• Supervise and sign-off publication of security advisories and coordinated disclosure according to legal obligations and customer specific agreements
• Coordinate the definition, selection and implementation of vulnerability tracking and reporting tools

Your Profile

• Significant experience (5+ years) in software product security with several years in security management
• Hands‑on familiarity with vulnerability management, including vulnerability scoring and disclosure
• Experience with security certification frameworks like ISO 21434, IEC 62443, DO-356 CC/EUCC or CRA
• Strong knowledge on operating systems, embedded systems, hypervisors or other types of safety and security critical software
• Experience with SBOM formats and management, e.g., SPDX, CycloneDX
• Leadership experience, communication skills and the capability to defend the security strategy internally and externally

We offer

• An open, cooperative and particularly good working atmosphere
• A permanent employment contract in a modern, well-equipped workplace
• Exciting tasks and individual training opportunities
• Tutor and introduction week during the initial training period
• Mobile working
• Company events