Manager - Product Security

Fresenius Medical Care; Bengaluru; Hybrid; INR 4,000,000 - 7,000,000; Full time

Benefits offered by this job

Hybrid Work Environment

Transportation Facilities

Medical Benefits

Cafeteria Benefits

Global Exposure

Growth Opportunity

Career Development

Job summary

Fresenius Medical Care is seeking a Manager of Product Security in India to lead and advance the organization’s product security program. You will drive secure-by-design principles across the product lifecycle, strengthen application and platform security, and improve the overall security posture of Fresenius Medical Care’s products and services.

You will collaborate with engineering, DevOps, cloud, and business stakeholders to embed security controls, conduct assessments, and lead incident

Qualifications

• 15+ years of experience in product security operations or related field.
• Direct people management experience is required.
• Strong stakeholder management and communication skills.
• Certifications such as CompTIA Security+, CISSP, CISM preferred.
• Experience with IT governance, risk management and controls.

Responsibilities

• Assist in day-to-day management of the Product Security program across multiple product and engineering teams.
• Define and track KPIs and KRIs to measure program effectiveness and risk.
• Embed security controls and automate policy enforcement across product ecosystems.
• Coordinate security assessments, pen tests, secure code reviews, and red team exercises.
• Lead remediation and risk-reduction for identified vulnerabilities across product lines.

Skills

Product security

Threat modeling

Vulnerability management

SDLC governance

Stakeholder management

Job description

Fresenius Medical Care is the premier health care company focused on delivering the highest quality of care to people with renal and other chronic conditions. Through our industry-leading global network of more than 3,400 dialysis clinics and acute care canters, outpatient cardiac and vascular labs, Fresenius Medical Care provides coordinated health care services at pivotal care points for hundreds of thousands of chronically ill patients.

As the world’s only vertically integrated renal company, we also offer specialty pharmacy and laboratory services, as well as manufacturing and distributing the most comprehensive line of dialysis equipment, disposable products and renal pharmaceuticals.

Fresenius Medical Care is a people business. Our success depends on having the best and brightest employees and helping them attain their personal and professional goals while delivering excellence in patient care and business results. Our employees embody our culture which is based on core values supporting our promise to improve the quality of life of every patient every day.

These core values are: We Care. We Connect. We Commit.

Manager Product Security

The Manager of Product Security will support the Global Product Security Program in leading and advancing the organization’s product security program in India. This role is responsible for driving secure-by-design principles across the product lifecycle, strengthening application and platform security capabilities, and enhancing the overall security posture and resilience of the company’s products and services.

PRINCIPAL DUTIES AND RESPONSIBILITIES:

Assist in the day-to-day management of the Product Security program, providing secure development and application security services across multiple product and engineering teams. This includes secure SDLC implementation, application security monitoring, vulnerability management, threat modeling, and security policy enforcement. Define and track key program metrics, including Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs), to measure the effectiveness of the Product Security program and assess product and application security risks across the organization. Partner with engineering, architecture, DevOps, cloud, and business stakeholders to embed security controls, automate policy enforcement, and identify opportunities for secure technology integrations within product ecosystems. Collaborate with third‑party vendors and internal teams to conduct application security assessments, penetration testing, secure code reviews, and red team exercises across products and platforms. Support and coordinate Product Security incident response activities, including triage, investigation, remediation guidance, and escalation management for application and product‑related security incidents. Lead and mentor Product Security engineers and analysts by establishing clear goals, deliverables, development plans, performance feedback, coaching, and operational metrics. Oversee the planning and execution of vulnerability assessments, penetration testing, threat modeling, and security reviews for products, applications, APIs, and cloud‑native platforms. Drive remediation and risk reduction strategies for identified vulnerabilities across product lines. Manage the execution of tactical and strategic Product Security initiatives through effective coordination of cross‑functional teams, with accountability for deliverables, timelines, resource planning, and operational outcomes. Stay current with industry best practices, emerging threats, secure development frameworks, cloud security standards, and regulatory guidance related to product and application security. Lead the development and enhancement of Product Security policies, standards, procedures, and secure engineering guidelines to address evolving application, API, cloud, and software supply chain threats. Lead and/or contribute to Product Security transformation initiatives, security tooling enhancements, DevSecOps integrations, compliance activities, and other strategic projects assigned by leadership.

EXPERIENCE AND REQUIRED SKILLS:

15+ years of experience working in the Product Security operations or relevant field, Direct people management experience is a must Experience in managing transformation projects and change management, Strong stakeholder management, Understanding of product security concepts including SDLC practices, threat modeling, vulnerability management, and application security governance. Ability to operate as a pro‑active and result‑driven problem solver with excellent analytical and interpersonal skills. Ability to understand IT and business management objectives, organizational risk appetite, and risk tolerance levels, and evaluate the impact of evolving business and technology changes on the organization’s risk profile. Strong client services orientation and communication skills coupled with a high sense of urgency to keep appropriate partners informed, including solutions to overcome obstacles to deliver to expectation. Strong understanding of risk management, integration with enterprise risk management and business strategy. Relevant certifications such as CompTIA Security+, CISSP, CISM are preferred. Experience in IT governance, risk, and controls, including governance frameworks. Demonstrated technical writing, communication, and presentation skills. Proven record to deliver results.

Our offer:

• Growth Opportunity: Be part of the dynamic growth and transformation of Fresenius Medical Care India Global Hub.
• Career Development: Access to challenging and rewarding opportunities for professional growth and career advancement.
• Hybrid Work Environment: Benefit from a flexible hybrid work setup that supports productivity and work‑life balance.
• Transportation Facilities: Convenient company‑provided cab services for pick‑up and drop‑off.
• Comprehensive Medical Benefits: Attractive medical benefits coverage for employees and their families.
• Cafeteria Benefits: Complimentary lunch facility at the workplace.
• Global Exposure: Gain valuable global exposure and access to diverse learning and development opportunities.
• Creating a future worth living. For patients. Worldwide. Every day.

Fresenius Medical Care is the world's leading provider of products and services for individuals with kidney disease of which approximately 4.5 million patients worldwide regularly undergo dialysis treatment. United by a shared purpose of creating a future worth living for chronically and critically ill people, we care for around 292,000 dialysis patients around the globe. In addition, we operate around 35 global production sites to provide products such as dialysis machines, dialyzers, and related disposables. We aim to continuously improve our patients’ quality of life by offering them high‑quality products as well as innovative technologies and treatment concepts.