Head of Product Security(m/w/x)

Description

In this role, you will lead the charge in defining and executing product security strategies for construction machines and digital products, ensuring compliance with EU regulations while embedding security best practices throughout the product lifecycle.

Requirements

• •Degree in Engineering, Cybersecurity, Computer Science, or related field
• •At least 5 years of experience in product or embedded cybersecurity, including 3+ years in a leadership role
• •Strong background in embedded systems, connected products, or industrial/IoT security
• •Proven ability to translate regulatory and technical requirements into practical engineering execution
• •Solid knowledge of standards and regulations such as UNECE R155/R156, EU CRA, IEC 62443, ISO 21434, NIST CSF
• •Experience with security testing methods and tools (e.g. SAST, DAST, fuzzing)
• •Strong leadership, communication, and stakeholder management skills
• •Experience in manufacturing, industrial, automotive, or heavy equipment environments is a strong advantage
• •Fluent English required; German and French are a plus

Tasks

• •Define and lead global product security strategy
• •Develop roadmap and execute plans for construction machines and digital products
• •Establish product security controls based on threat modeling and risk appetite
• •Serve as the central point for product security topics within Corporate Information Security
• •Address internal and external customer inquiries regarding product security matters
• •Define the product security governance framework, including policies and standards
• •Ensure adoption of security governance into R&D and engineering processes
• •Sponsor and deploy training on security best practices for Engineering teams
• •Ensure product compliance with EU Cyber Resilience Act and NIS2 regulations
• •Embed security-by-design into hardware, firmware, and embedded software
• •Build, mentor, and lead a team of product security experts
• •Foster collaboration with Engineering teams and Corporate Information Security domains

Tools & Technologies

Benefits