Senior IT Product Security Owner (Hybrid, Lisbon)

act digital; Lisboa; Hybrid; EUR 70,000 - 95,000; Full time

Job summary

act digital is seeking a Senior IT Product Security Owner to embed security across the product lifecycle and strengthen cloud security practices. The role is based in Lisbon, Portugal, with a hybrid schedule of 2 on-site days per week.

You will own security requirements, collaborate with product, engineering, cloud and operations teams, and drive risk remediation, IAM, encryption and security testing across the SSDLC and cloud controls.

Qualifications

• Minimum 7 years in IT and information security.
• Experience in product security, cloud security and security risk assessments.
• Knowledge of ISO 2700x, IAM, encryption, vulnerability management and security testing.
• Experience with SSDLC and Azure security controls.
• Professional English, at C1 level or equivalent.
• Strong communication and stakeholder management skills.

Responsibilities

• Own product security requirements, assessments and risk remediation across the product lifecycle.
• Partner with product, engineering, cloud and operations teams to embed security into design and delivery.
• Strengthen identity and access management, encryption, vulnerability management and security testing.
• Support secure software development lifecycle (SSDLC) practices and cloud security controls.
• Help maintain alignment with ISO 2700x standards and relevant security policies.

Skills

Product security

Cloud security

Security risk assessments

SSDLC

IAM

Encryption

Security testing

Stakeholder management

Communication

Azure security controls

Tools

Azure security controls

Job description

act digital is seeking a Senior IT Product Security Owner to embed security across the product lifecycle and strengthen cloud security practices. The role is based in Lisbon, Portugal, with a hybrid schedule of 2 on-site days per week.

You will own security requirements, collaborate with product, engineering, cloud and operations teams, and drive risk remediation, IAM, encryption and security testing across the SSDLC and cloud controls.