Product Owner (Cloud & Information Security)

Empa-T; Lisboa; Hybrid; EUR 60,000 - 90,000; Full time

Job summary

Empa-T is seeking an experienced Product Owner to lead security-focused cloud products in an international insurance project. You will ensure compliance with Group Security standards, embed security across the product lifecycle, and collaborate with Security Officers and stakeholders.

The role emphasizes securing cloud-based IT products, coordinating assessments, and driving remediation within Azure environments while maintaining strong documentation and reporting on risk management.

Qualifications

• 7+ years of experience in Information Technology and Information Security.
• Degree in Information Security, Computer Science, or a related field.
• Strong knowledge of security standards and frameworks (ISO 2700x and related frameworks).
• Experience with Identity & Access Management (IAM) and access control models.
• Hands-on experience with Security Assessments and Security Testing methodologies.
• Strong understanding of encryption methods and secure communication protocols.
• Experience implementing Secure Software Development Lifecycle (SSDLC) practices.
• Experience in Vulnerability Management.
• Strong Azure Cloud Security knowledge.
• Excellent analytical and organizational skills.
• Experience working in multicultural and geographically distributed environments.
• Strong communication and stakeholder management capabilities.

Responsibilities

• Ensure the overall security posture of assigned IT Products.
• Support the Security & Compliance Control Centre in aligning products with Group Security standards.
• Define and maintain security requirements and controls with application teams.
• Coordinate and support security assessment and testing activities.
• Drive vulnerability management and remediation initiatives.
• Own and monitor security remediation plans and implementation progress.
• Provide security guidance and support to IT Product teams.
• Create, document, and improve internal security processes and procedures.
• Facilitate and coordinate security-related meetings, workshops, and reviews.
• Promote security‑by‑design practices across the Software Development Lifecycle (SDLC).
• Support cloud security initiatives, particularly within Azure environments.
• Produce clear documentation and reporting related to security compliance and risk management.

Skills

Security governance

Threat modeling

Stakeholder management

Analytical skills

Communication skills

Education

Degree in Information Security/Computer Science

Tools

Azure Cloud Security

Job description

At Empa‑T, we believe that security is a key enabler of innovation, resilience, and trust in modern digital organizations.

We are looking for an experienced Product Owner to join an international project within the insurance sector. You will play a critical role in strengthening the security posture of cloud products, ensuring compliance with Group Security standards, and supporting application teams throughout the entire product lifecycle.

About the Project

As part of a multicultural and geographically distributed environment, you will collaborate closely with Product Teams, Security Officers, and key stakeholders to proactively embed security into products and services. The focus is on ensuring compliance, driving security improvements, and supporting cloud-based products throughout their lifecycle.

Key Responsibilities

• Ensure the overall security posture of assigned IT Products.
• Support the Security & Compliance Control Centre in aligning products with Group Security standards.
• Define and maintain security requirements and controls with application teams.
• Coordinate and support security assessment and testing activities.
• Drive vulnerability management and remediation initiatives.
• Own and monitor security remediation plans and implementation progress.
• Provide security guidance and support to IT Product teams.
• Create, document, and improve internal security processes and procedures.
• Facilitate and coordinate security-related meetings, workshops, and reviews.
• Promote security‑by‑design practices across the Software Development Lifecycle (SDLC).
• Support cloud security initiatives, particularly within Azure environments.
• Produce clear documentation and reporting related to security compliance and risk management.

Skills & Experience

• 7+ years of experience in Information Technology and Information Security.
• Degree in Information Security, Computer Science, or a related field.
• Strong knowledge of security standards and frameworks (ISO 2700x and related frameworks).
• Experience with Identity & Access Management (IAM) and access control models.
• Hands‑on experience with Security Assessments and Security Testing methodologies.
• Strong understanding of encryption methods and secure communication protocols.
• Experience implementing Secure Software Development Lifecycle (SSDLC) practices.
• Experience in Vulnerability Management.
• Strong Azure Cloud Security knowledge.
• Excellent analytical and organizational skills.
• Experience working in multicultural and geographically distributed environments.
• Strong communication and stakeholder management capabilities.

Nice to Have

• Data Privacy and GDPR expertise.
• Operational Resilience experience.
• Knowledge of ITIL processes and framework.
• Experience within the Insurance or Financial Services sector.

Portugal | Lisbon | Hybrid (2 days/week onsite)

Why Empa‑T?

At Empa‑T, we value empathy, integrity, and collaboration.

We work on impactful international projects where technology, security, and people come together to create meaningful change. You'll have the opportunity to contribute to large‑scale cloud and security initiatives while working alongside experienced professionals in highly regulated and complex environments.

Join us and help build secure, resilient, and compliant digital products that protect millions of customers worldwide.