Accountabilities

Define global product security strategy: Develop and execute a comprehensive product cybersecurity strategy aligned with organizational objectives, regulatory requirements, and evolving industry standards.
Establish security governance: Create and oversee product security policies, standards, frameworks, and secure development lifecycle practices across hardware, software, digital products, and connected medical devices.
Integrate cybersecurity throughout the product lifecycle: Partner with Research and Development, Quality, Regulatory Affairs, and IT teams to embed cybersecurity risk management into product design, development, deployment, and post-market activities.
Lead global security operations: Manage and develop global teams and external partners responsible for delivering product security services, technical capabilities, tools, and operational support at scale.
Oversee vulnerability and threat management: Direct vulnerability management programs, threat modeling, penetration testing, security assessments, and incident response activities related to product security.
Ensure regulatory compliance: Drive compliance with applicable international cybersecurity regulations, medical device requirements, industry standards, and regulatory guidance, including FDA requirements and ISO and IEC standards.
Manage cybersecurity risks: Identify, assess, prioritize, and mitigate product security risks while ensuring appropriate protection for patients, customers, connected systems, and business operations.
Provide executive-level reporting: Deliver strategic insights, performance indicators, risk assessments, and updates on cybersecurity trends and product security initiatives to senior leadership.
Build a strong security culture: Develop and promote security awareness, training programs, and organizational initiatives that strengthen cybersecurity knowledge and accountability across teams.
Drive continuous improvement: Evaluate existing security processes, identify capability gaps, and implement scalable improvements to strengthen product security maturity and operational effectiveness.
Develop strategic partnerships: Build strong relationships with internal stakeholders, external service providers, and industry partners to support consistent security execution across global operations.

Requirements

Bachelor's degree in Computer Science, Engineering, Information Security, or another relevant technical discipline.
Master's degree in Cybersecurity, Engineering, or Business Administration is preferred.
10–12 years of professional experience in cybersecurity or product security leadership roles, including experience managing global responsibilities and operating within complex, matrixed organizations.
Demonstrated experience securing complex software-enabled products, connected technologies, or digital solutions, preferably within highly regulated industries.
Strong understanding of secure product development methodologies, vulnerability management, cybersecurity risk assessment, and security governance frameworks.
Proven ability to establish and implement product security strategies, policies, standards, and operational models across diverse technical environments.
Experience leading, developing, and managing high-performing global teams, including service-based operating models and external partners.
Excellent executive-level communication, presentation, and stakeholder management skills, with the ability to influence decisions and drive alignment across multiple business functions.
Strong strategic thinking, analytical reasoning, and decision-making capabilities, with the ability to translate complex cybersecurity challenges into actionable business priorities.
Ability to balance cybersecurity requirements, regulatory obligations, product innovation, and operational objectives.
Professional fluency in English; additional languages are considered an advantage.
Willingness to travel domestically and internationally up to 20%.

Preferred Qualifications and Experience:

How Jobgether works

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1