IT Product Security Owner

aRBe-IT; Lisboa; Hybrid; EUR 65,000 - 95,000; Full time

Job summary

aRBe-IT in Lisbon is seeking an experienced IT Product Security Owner to join an international team and strengthen security and compliance across cloud-based products.

You will collaborate with IT Product teams and Security stakeholders to align with corporate standards, manage security risks, and embed secure SDLC and Azure security practices across the product lifecycle, with hybrid work and occasional travel.

Qualifications

• 7+ years of experience in IT and Information Security.
• Degree in Information Security, CS, or related field.
• Strong knowledge of ISO 27000-series and security frameworks.
• Experience with Azure cloud security, IAM, assessments, and vulnerability management.

Responsibilities

• Oversee security posture of assigned IT products, ensuring compliance with internal standards and security frameworks.
• Define and support the implementation of security requirements and controls.
• Coordinate security assessments, testing activities and vulnerability management.
• Own security remediation plans, monitor progress and drive the resolution of identified issues.
• Advise IT Product teams on security risks, controls and continuous improvement initiatives.

Skills

Security governance

IT security

Cloud security

Stakeholder collaboration

Education

Degree in Information Security/CS

Tools

Azure

IAM

SSDLC

Vulnerability management

Job description

We are looking for an experienced IT Product Security Owner to join an international team in Lisbon, playing a key role in strengthening security and compliance across cloud-based products.

In this role, you will collaborate with IT Product teams and Security stakeholders to ensure alignment with corporate security standards, manage security risks and embed security best practices throughout the product lifecycle.

What you'll be doing:

• Oversee the security posture of assigned IT products, ensuring compliance with internal standards and security frameworks;
• Define and support the implementation of security requirements and controls;
• Coordinate security assessments, testing activities and vulnerability management;
• Own security remediation plans, monitor progress and drive the resolution of identified issues;
• Ensure alignment with ISO 27000-series standards and corporate security policies;
• Support Identity and Access Management, encryption and secure communication practices;
• Promote secure software development practices and strengthen Azure cloud security;
• Maintain security documentation, procedures and compliance evidence;
• Coordinate security-related meetings and collaborate with international teams;
• Advise IT Product teams on security risks, controls and continuous improvement initiatives.

What we're looking for

• 7+ years of experience in IT and Information Security;
• Degree in Information Security, Computer Science or a related field, or equivalent academic background;
• Strong knowledge of security standards and frameworks, particularly ISO 27000-series;
• Experience with Azure cloud security, Identity and Access Management, security assessments and vulnerability management;
• Knowledge of encryption methods, secure protocols and the Secure Software Development Lifecycle (SSDLC);
• Strong analytical, organisational and coordination skills;
• Ability to translate complex security requirements into clear documentation and actionable plans;
• Experience working in multicultural, international and geographically distributed environments;
• A proactive, detail-oriented mindset with a strong sense of ownership and accountability.

Nice to have:

• Knowledge of GDPR and data privacy;
• Familiarity with Operational Resilience;
• Knowledge of the ITIL framework;

Languages

French — a plus

Hybrid — 2 days per week in the office

Occasional travel may be required.

If you have a strong background in IT security and cloud environments and are ready to drive security governance, compliance and risk management across technology products, we would love to hear from you.

aRBe-IT is a company specialized in Hunting and Outsourcing of Information Technology with a focus on identifying and allocating high-performance technological talents.