Product Security Officer

Werfenlife SA.; Madrid; Híbrido; EUR 30.000 - 50.000; Jornada completa

Descripción de la vacante

An innovative company is seeking a Product Security Officer to enhance the cybersecurity of its products and services. This role is pivotal in safeguarding computer systems and data, requiring a deep understanding of cybersecurity threats and robust security solutions. The Product Security Officer will collaborate with senior management and ensure compliance with security standards while guiding the development of security procedures. This hybrid position allows for flexibility, with three days remote and two days on-site. Join a forward-thinking team dedicated to maintaining the highest standards of product security.

Formación

• 5+ years of experience in product security is required.
• Strong knowledge of secure coding practices and best practices.

Responsabilidades

• Design, implement, and manage security measures for products.
• Perform product security and privacy risk assessments.

Conocimientos

Analytical Skills

Problem-Solving Skills

Effective Communication

Knowledge of Secure Coding Practices

Knowledge of Cybersecurity Trends

Educación

Engineer or Computer Science Degree

Herramientas

ISO 27001

SW Testing Processes

Certified Ethical Hacker (CEH)

Descripción del empleo

We are looking for a Product Security Officer. This position is part of the Product Cybersecurity Department, an organizational unit within the company that focuses on ensuring the security of its products and services. This department is responsible for implementing, managing, and overseeing cybersecurity measures specific to the development, deployment, and ongoing support of the company's products.

The primary responsibility of the position involves designing, implementing, testing, and managing security measures to protect computer systems, networks, and data. The role requires a deep understanding of current and emerging cybersecurity threats, as well as the ability to develop, implement, and test robust security solutions.

The Product Security Officer is ultimately responsible for the Privacy and Cybersecurity activities performed in Werfen Clinical Software. He / she interacts with the direction and senior management of the company.

This position is Hybrid (Remote 3 days and Presential 2 days per week).

Key Accountabilities:

1. Perform product security and privacy risk assessments.
2. Define the product security roadmap.
3. Ensure alignment between Werfen security and privacy compliance programs and policies and act as a liaison to the Clinical Software departments.
4. Provide guidance for the creation and evolution of the Quality Management System procedures for cybersecurity.
5. Review and approve security-related formal documentation of the products developed by the company.
6. Define security procedures and requirements for the Secure Development Life Cycle.

Minimum Knowledge & Experience required for the position:

Education: Engineer, Computer Science or other Technical degree, or equivalent work experience.

Experience: The required work experience for the position is at least 5 years in product security.

The following work experience and qualifications are a plus:

• Strong knowledge of secure coding practices and product security best practices.
• Certifications such as Certified Ethical Hacker (CEH).
• Solid knowledge of SW testing processes and methodologies.
• Knowledge of relevant standards such as ISO 27001.
• Knowledge of medical device regulations.

Skills & Capabilities:

• Strong analytical and problem-solving skills to identify and address security challenges and vulnerabilities.
• Effective communication skills to convey complex cybersecurity concepts to both technical and non-technical stakeholders.
• Willingness to stay updated on the latest cybersecurity trends, threats, and technologies through continuous learning and professional development.
• Ability to collaborate with cross-functional teams, share information, and work together to enhance overall cybersecurity posture.