Global Product Security Leader

Donaldson; Terrassa; Presencial; EUR 70.000 - 90.000; Jornada completa

Descripción de la vacante

Donaldson is seeking a Product Security Lead to establish and operate the global product security incident management and vulnerability lifecycle across all product lines.

This role serves as the single point of contact for product security incidents and vulnerability management, ensuring timely identification, remediation, disclosure, and reporting in alignment with regulatory requirements, including the EU Cyber Resilience Act (CRA).

Formación

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or related field (or equivalent experience).
• Minimum 5+ years of experience in application security, product security, or quality assurance.
• Experience managing vulnerability lifecycles, including triage, remediation, and disclosure.
• Strong understanding of secure software development and software supply chain risks (including SBOM).
• Ability to coordinate cross-functional teams and communicate risk to technical and non-technical stakeholders.

Responsabilidades

• Serve as the designated PSIM for all product-related vulnerabilities and security incidents.
• Lead the end-to-end lifecycle of product security vulnerabilities, including identification, triage, remediation, and communication.
• Coordinate cross-functional response efforts across Product, Corporate Engineering, Legal, and Communications teams.
• Establish and operate continuous vulnerability monitoring processes for digital products and associated electronic components.
• Oversee the development and secure distribution of patches and security updates to customers.
• Maintain and govern a machine-readable SBOM for products and ensure SBOM accuracy.
• Establish and manage external vulnerability disclosure channels and align with regulatory requirements.
• Translate product security strategy into scalable processes and embed secure-by-design principles across the lifecycle.
• Develop and maintain metrics and reporting to track vulnerability management effectiveness.

Educación

Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or related field (or equivalent experience)

Descripción del empleo

Donaldson is seeking a Product Security Lead to establish and operate the global product security incident management and vulnerability lifecycle across all product lines.

This role serves as the single point of contact for product security incidents and vulnerability management, ensuring timely identification, remediation, disclosure, and reporting in alignment with regulatory requirements, including the EU Cyber Resilience Act (CRA).