Product Security Manager - FINLAND

M Files; Tampere; On-site; EUR 90,000 - 130,000; Full time

Job summary

M-Files is seeking a Product Security Manager to lead the Product Security team and drive security across its products and cloud service. You will set the security strategy and roadmap, prioritize work, and mentor engineers to raise the security baseline.

You will collaborate with Information Security & Compliance, Product Engineering, Cloud Operations, and external auditors to ensure secure-by-design, audit-ready systems and trusted by customers.

Qualifications

• Lead the Product Security team and set strategy and roadmap.
• Collaborate with Engineering, Security, and external auditors to ensure secure-by-design practices.

Responsibilities

• Lead Product Security team and prioritize security-related work.
• Own Product Security strategy and roadmap; represent Security in the wider Product org planning.
• Coach developers and Security Champions; raise the security baseline.
• Drive AI adoption in security activities across products and cloud services.
• Embed secure development lifecycle across the product organization.

Skills

Team Leadership

Security strategy

Secure SDLC

Threat Modeling

CI/CD Security

AI in security

SBOM monitoring

Tools

SAST

DAST

SCA

Container scanning

Job description

APPLICATION DEADLINE:

This role will be taken offline based on applicant volume.

Who We Are

M-Files is redefining how work gets done. Our context-first document management system offers purpose-built business use cases—spanning universal and industry-specific workflows—to enable secure collaboration, automate processes, and ensure governance.

Unlike traditional systems, M-Files organizes content around the context of your business, connecting documents to related people, projects, and transactions. With our unique metadata-driven architecture, organizations can model content in line with their business processes, unify information across silos, and apply AI at scale. The result is greater productivity, reduced risk, and smarter, faster decisions for over 6,000 customers in 100+ countries.

To learn more about us we encourage you to visit http://www.m-files.com/
The Product Security Manager leads M-Files' Product Security team and is the technical security authority for M-Files products and the M-Files Cloud service, including our growing AI-native capabilities. This role combines hands-on technical work with team leadership. You will set the Product Security strategy and roadmap, prioritize the team's work, and help make product security a strength our customers can rely on.

You will work closely with Information Security & Compliance, Product Engineering, Cloud Operations, and external auditors to keep M-Files secure by design, audit-ready, and trusted by our customers.

What you will be doing / Key responsibilities and duties

As Product Security Manager, you lead the Product Security team and contribute hands-on across the technical areas below, working alongside your team members.

Team Leadership

• Lead and prioritize the work of the Product Security team, collaborating with team members to identify and resolve security problems.
• Own the Product Security strategy and roadmap and represent Product Security in the wider Product organization's planning.
• Coach developers and Security Champions; raise the technical security baseline company-wide.
• Build a strong, technically credible team that keeps up with M-Files' growth.
• Drive AI adoption in the team's own work to improve efficiency and coverage of security activities.

Secure Development Lifecycle

• Work with engineering leadership to embed the secure development lifecycle across the product organization.
• Lead threat modeling with Product Engineering, security assessments, secure coding guidance, and AI-assisted and manual code reviews on higher-risk changes.
• Ensure security testing tools (SAST, DAST, SCA, container scanning) are effectively integrated into CI/CD pipelines.
• Own software supply chain security, including SBOM generation and dependency monitoring.
• Maintain security-related policies, SOPs, and guidelines for the product organization, aligned with our certifications (ISO/IEC 27001