Manager IT Product and R&D Security
On-siteAlbarraque, Distrito de Lisboa, Portuguese Republic
Job Summary
Implement and follow up on risk reduction activities as the Single Point of Contact for Information Security, overseeing security improvements across R&D projects and business-as-usual operations. Conduct software security assessments, evaluate new technologies like AI and IoT for security implications, and manage vendor risk governance for third-party cyber maturity. Perform active governance on security metrics, lead contract security clause creation, and ensure timely remediation of findings from assessments. Drive cybersecurity resilience activities including disaster recovery, manage vulnerability assessments, and represent IT during internal or external audits. Actively participate in cyber incidents from identification to eradication and provide security awareness training to raise function-wide security consciousness.
Required Qualifications
- Minimum 5-8 years of experience in an information security, IT risk management or IT audit function within a large organization
- Proven track record in supporting development teams throughout all phases of secure systems development life cycle (design, development, maintenance)
- Good knowledge of typical application design patterns (e.g. web, mobile, thick client, APIs, etc.)
- Good understanding of cloud computing architectures (e.g. SaaS, IaaS, PaaS, FaaS) and their corresponding characteristics in terms of information security
- Good understanding of modern technologies such as IoT, Machine learning, and automation
- Knowledge of basic identity and access management concepts (e.g. single-sign on, identity federation) and standards (e.g. SAML, OAuth 2.0, OpenID)
- Familiarity with most common web application security issues (e.g. OWASP top 10)
- General understanding of regulatory requirements (e.g. GxP, GDPR/Data Act, Chinese cyber and privacy laws) and their impact on systems
- Experience working with electronics manufacturing and supply chain service providers
- Strong communication skills and ability to explain technical topics to non-technical people
- Practical experience in Agile/DevOps organizations and cultures
- Teamwork and collaboration across cultures and geographies (Europe and Asia)
- Only CVs in English will be considered
Desired Qualifications
- Customer Service culture
- Basic understanding of consumer electronics and product security operations
- Experience supporting Product Development/Manufacturing/Testing/Labs environments
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.