Senior IT Product Security Owner

act digital; Lisboa; Ibrido; EUR 70.000 - 95.000; Tempo pieno

Descrizione del lavoro

act digital is seeking a Senior IT Product Security Owner to embed security across the product lifecycle and strengthen cloud security practices. The role is based in Lisbon, Portugal, with a hybrid schedule of 2 on-site days per week.

You will own security requirements, collaborate with product, engineering, cloud and operations teams, and drive risk remediation, IAM, encryption and security testing across the SSDLC and cloud controls.

Competenze

• Minimum 7 years in IT and information security.
• Experience in product security, cloud security and security risk assessments.
• Knowledge of ISO 2700x, IAM, encryption, vulnerability management and security testing.
• Experience with SSDLC and Azure security controls.
• Professional English, at C1 level or equivalent.
• Strong communication and stakeholder management skills.

Mansioni

• Own product security requirements, assessments and risk remediation across the product lifecycle.
• Partner with product, engineering, cloud and operations teams to embed security into design and delivery.
• Strengthen identity and access management, encryption, vulnerability management and security testing.
• Support secure software development lifecycle (SSDLC) practices and cloud security controls.
• Help maintain alignment with ISO 2700x standards and relevant security policies.

Conoscenze

Product security

Cloud security

Security risk assessments

SSDLC

IAM

Encryption

Security testing

Stakeholder management

Communication

Azure security controls

Strumenti

Azure security controls

Descrizione del lavoro

We are seeking a Senior IT Product Security Owner to embed security across the product lifecycle and strengthen cloud security practices.

Location: Lisbon, Portugal (hybrid, 2 days per week on site)
Employment: Full-time

Responsibilities

• Own product security requirements, assessments and risk remediation across the product lifecycle.
• Partner with product, engineering, cloud and operations teams to embed security into design and delivery.
• Strengthen identity and access management, encryption, vulnerability management and security testing.
• Support secure software development lifecycle (SSDLC) practices and cloud security controls.
• Help maintain alignment with ISO 2700x standards and relevant security policies.

Required skills and experience

• At least 7 years of experience in IT and information security.
• Experience in product security, cloud security and security risk assessments.
• Strong knowledge of ISO 2700x, IAM, encryption, vulnerability management and security testing.
• Experience with SSDLC and Azure security controls.
• Professional English, at C1 level or equivalent.
• Strong communication and stakeholder management skills.

This full-time role is based in Lisbon with a hybrid schedule of 2 on-site days per week.