Product Security Officer

Werfenlife SA.; Barcelona; Presencial; EUR 60.000 - 100.000; Jornada completa

Descripción de la vacante

An innovative company is seeking a Product Security Officer to enhance cybersecurity measures for its products. In this hybrid role, you'll design and implement security solutions while collaborating with cross-functional teams. Your expertise will ensure compliance with security standards and regulations, making a significant impact on the company's cybersecurity posture. If you have a strong background in product security and a passion for staying ahead of emerging threats, this is an exciting opportunity to contribute to a vital area of the business while working in a flexible environment.

Formación

• 5+ years of experience in product security with a technical degree.
• Strong knowledge of secure coding practices and cybersecurity best practices.

Responsabilidades

• Design and manage security measures for computer systems and networks.
• Perform product security and privacy risk assessments.

Conocimientos

Analytical Skills

Problem-Solving Skills

Effective Communication

Knowledge of Cybersecurity Trends

Educación

Engineering or Computer Science Degree

Technical Degree or Equivalent Experience

Herramientas

ISO 27001 Knowledge

Secure Coding Practices

SW Testing Processes

Medical Device Regulations Knowledge

Descripción del empleo

We are looking for a Product Security Officer. This position is part of the Product Cybersecurity Department, an organizational unit within the company that focuses on ensuring the security of its products and services. This department is responsible for implementing, managing, and overseeing cybersecurity measures specific to the development, deployment, and ongoing support of the company's products.

The primary responsibility of the position involves designing, implementing, testing, and managing security measures to protect computer systems, networks, and data. The role requires a deep understanding of current and emerging cybersecurity threats, as well as the ability to develop, implement, and test robust security solutions.

The Product Security Officer is ultimately responsible for the Privacy and Cybersecurity activities performed in Werfen Clinical Software. He / she interacts with the direction and senior management of the company.

This position is Hybrid (Remote 3 days and Presential 2 days per week).

Key Accountabilities :

• Perform product security and privacy risk assessments.
• Define the product security roadmap.
• Ensure alignment between Werfen security and privacy compliance programs and policies and act as a liaison to the Clinical Software departments.
• Provide guidance for the creation and evolution of the Quality Management System procedures for cybersecurity.
• Review and approve security-related formal documentation of the products developed by the company.
• Define security procedures and requirements for the Secure Development Life Cycle.

Minimum Knowledge & Experience required for the position :

• Education : Engineer, Computer Science or other Technical degree, or equivalent work experience.
• Experience : The required work experience for the position is at least 5 years in product security.
• The following work experience and qualifications are a plus :
• Strong knowledge of secure coding practices and product security best practices.
• Certifications such as Certified Ethical Hacker (CEH).
• Solid knowledge of SW testing processes and methodologies.
• Knowledge of relevant standards such as ISO 27001.
• Knowledge of medical device regulations.

Skills & Capabilities :

• Strong analytical and problem-solving skills to identify and address security challenges and vulnerabilities.
• Effective communication skills to convey complex cybersecurity concepts to both technical and non-technical stakeholders.
• Willingness to stay updated on the latest cybersecurity trends, threats, and technologies through continuous learning and professional development.
• Ability to collaborate with cross-functional teams, share information, and work together to enhance overall cybersecurity posture.