Head of Product Security (m/w/d)

SYSGO AG; Klein-Winternheim; Hybrid; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Open atmosphere

Permanent contract

Mobile working

Company events

Zusammenfassung

SYSGO AG is seeking a Product Security leader in Germany to define and execute the security strategy for certification roadmaps. You will oversee budgets, harmonize processes, and lead a security team focused on critical software across embedded platforms.

The role requires 5+ years in software product security, hands-on vulnerability management, and experience with ISO 21434, IEC 62443, DO-356 CC/EUCC or CRA, plus SBOM expertise.

Qualifikationen

• Significant experience (5+ years) in software product security with several years in security management.
• Hands-on familiarity with vulnerability management, including vulnerability scoring and disclosure.
• Experience with security certification frameworks like ISO 21434, IEC 62443, DO-356 CC/EUCC or CRA.
• Strong knowledge of operating systems, embedded systems, hypervisors or other safety/security critical software.
• Experience with SBOM formats and management, e.g., SPDX, CycloneDX.

Aufgaben

• Define and drive the product security strategy regarding features and certification roadmap in consultation with senior leadership.
• Own budget and resource planning for product security certification.
• Harmonize security processes across product lines.
• Lead and grow the product security team.
• Sign the CE self-declaration on behalf of the organization.

Kenntnisse

Security leadership

Vulnerability management

Security strategy

Embedded systems

Tools

SPDX

CycloneDX

Jobbeschreibung

Your Tasks

Strategy and Leadership

• Define and drive the product security strategy regarding features and certification roadmap in consultation with the Head of Product Engineering and VP of Product Strategy & Innovation
• Own budget and resource planning for product security certification
• Harmonize security processes across product lines
• Lead and grow the product security team
• Sign the CE self-declaration on behalf of the organization

Vulnerability & Incident Response

• Own the PSIRT operations end to end: vulnerability intake monitoring, triage and validation, and remediation coordination with product engineering
• Supervise and sign-off publication of security advisories and coordinated disclosure according to legal obligations and customer specific agreements
• Coordinate the definition, selection and implementation of vulnerability tracking and reporting tools

Your Profile

• Significant experience (5+ years) in software product security with several years in security management
• Hands-on familiarity with vulnerability management, including vulnerability scoring and disclosure
• Experience with security certification frameworks like ISO 21434, IEC 62443, DO-356 CC/EUCC or CRA
• Strong knowledge on operating systems, embedded systems, hypervisors or other types of safety and security critical software
• Experience with SBOM formats and management, e.g., SPDX, CycloneDX
• Leadership experience, communication skills and the capability to defend the security strategy internally and externally

We offer

• An open, cooperative and particularly good working atmosphere
• A permanent employment contract in a modern, well-equipped workplace
• Exciting tasks and individual training opportunities
• Tutor and introduction week during the initial training period
• Mobile working
• Company events