Senior Manager, Product & Cloud Security

GamblingCareers.com; Trondheim; On-site; NOK 1,000,000 - 1,300,000; Full time

Job summary

Sportradar is seeking a Manager of DevSecOps & Application Security to lead a team focused on secure software delivery, cloud and Kubernetes security, vulnerability management, and security tooling. You will partner with Engineering, Platform Engineering, Product and Information Security leadership to set strategy and a roadmap for secure software development across the organization.

Success means balancing security risk with engineering enablement, guiding teams to build secure solutions with

Responsibilities

• Lead, mentor and grow a team of DevSecOps, Application Security and Security Engineering professionals.
• Define the vision, strategy and roadmap for DevSecOps and application security capabilities.
• Establish measurable objectives, KPIs and maturity goals aligned with business priorities.
• Foster a culture of collaboration, ownership, continuous learning and engineering excellence.
• Manage team planning, budgeting, hiring and performance management activities.
• Drive the adoption of Secure Software Development Lifecycle (SSDLC) practices across engineering teams.
• Establish scalable security review, threat modelling and secure design processes.
• Partner with engineering leaders to integrate security requirements into software delivery processes.
• Champion secure-by-design principles throughout the product lifecycle.
• Lead the integration of security controls and automated testing into CI/CD platforms.
• Drive security automation initiatives that improve developer experience and reduce operational overhead.
• Define standards for SAST, DAST, SCA, IaC scanning and software supply chain security.
• Ensure security tooling is effectively integrated into engineering workflows.
• Partner with Platform Engineering to strengthen Cloud and Kubernetes security capabilities.
• Drive cloud security posture management initiatives and continuous security monitoring.
• Establish security baselines, guardrails and best practices for cloud-native environments.
• Support the secure adoption of emerging technologies, including AI-enabled development environments.
• Own the strategy and governance for risk-based vulnerability management.
• Establish prioritization frameworks based on exploitability, business context and risk.
• Define remediation SLAs, metrics and reporting mechanisms.
• Partner with engineering organizations to improve remediation effectiveness and accountability.
• Act as a trusted advisor to engineering and technology leaders.
• Influence strategic technology decisions through risk-informed security guidance.
• Communicate security risks, priorities and progress to senior leadership.
• Build strong partnerships across Engineering, Platform, Product and Security teams.

Job description

As Manager, DevSecOps & Application Security, you will lead a team of security engineers focused on secure software delivery, cloud and Kubernetes security, vulnerability management, application security, and security tooling.

You will work closely with Engineering, Platform Engineering, Product and Information Security leadership to define the strategy, priorities and roadmap for secure software development across Sportradar.

Success in this role requires balancing security risk management with engineering enablement, helping teams build secure solutions without creating unnecessary friction.

Team Leadership & Strategy

• Lead, mentor and grow a team of DevSecOps, Application Security and Security Engineering professionals.
• Define the vision, strategy and roadmap for DevSecOps and application security capabilities.
• Establish measurable objectives, KPIs and maturity goals aligned with business priorities.
• Foster a culture of collaboration, ownership, continuous learning and engineering excellence.
• Manage team planning, budgeting, hiring and performance management activities.

Secure Software Development

• Drive the adoption of Secure Software Development Lifecycle (SSDLC) practices across engineering teams.
• Establish scalable security review, threat modeling and secure design processes.
• Partner with engineering leaders to integrate security requirements into software delivery processes.
• Champion secure-by-design principles throughout the product lifecycle.

DevSecOps & Security Automation

• Lead the integration of security controls and automated testing into CI/CD platforms.
• Drive security automation initiatives that improve developer experience and reduce operational overhead.
• Define standards for SAST, DAST, SCA, IaC scanning and software supply chain security.
• Ensure security tooling is effectively integrated into engineering workflows.

Cloud & Platform Security

• Partner with Platform Engineering to strengthen Cloud and Kubernetes security capabilities.
• Drive cloud security posture management initiatives and continuous security monitoring.
• Establish security baselines, guardrails and best practices for cloud-native environments.
• Support the secure adoption of emerging technologies, including AI-enabled development environments.

Vulnerability Management

• Own the strategy and governance for risk-based vulnerability management.
• Establish prioritization frameworks based on exploitability, business context and risk.
• Define remediation SLAs, metrics and reporting mechanisms.
• Partner with engineering organizations to improve remediation effectiveness and accountability.

Stakeholder Engagement

• Act as a trusted advisor to engineering and technology leaders.
• Influence strategic technology decisions through risk-informed security guidance.
• Communicate security risks, priorities and progress to senior leadership.

Build strong partnerships across Engineering, Platform, Product and Security teams.

Work Format

While we appreciate the flexibility and benefits of working from home, we strongly believe that coming together in person fosters stronger connections, encourages collaboration, and drives innovation - both as individuals and as a company. The energy, shared ideas, and team support we experience in the office strengthen the foundation of our success and culture. For this reason, we are an office-first business operating on a fully on-site model, with team members working in the office five days a week to build relationships, exchange ideas, and grow together.

Additional Information

At Sportradar, we celebrate our diverse group of hardworking employees. Sportradar is committed to ensuring equal access to its programs, facilities, and employment opportunities. All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. We encourage you to apply even if you only meet most of the requirements (but not 100% of the listed criteria) – we believe skills evolve over time. If you’re willing to learn and grow with us, we invite you to join our team!