Description

As a Product Security Officer, you will play a crucial role in ensuring the security of products and services by identifying risks, driving compliance, and collaborating with various teams. Your day-to-day responsibilities will include reporting on security metrics, conducting risk assessments, and championing security best practices throughout the product lifecycle.

Requirements

• •Master's degree or equivalent combination of education and work experience
• •Minimum 5 years of experience with Bachelor's or Minimum 3 years of experience with Master's in Security Compliance, Risk Management, Cryptography, Product Security, Security Testing & Automation or equivalent
• •Information security management or audit qualifications such as CISM, CISSP, CISA, or CRISC
• •Experience in Health information security management (ISO 27799, ISO/IEC 80001, RMF for DoD, EU MDR, UL 2900)
• •Excellent knowledge of laws and regulations on cybersecurity, privacy, data protection, and breach notification (GDPR, HIPAA, FDA Pre and Post Cybersecurity Requirements, ISO/TS 14265, 21CFR820, SB1386)
• •Domain specific standards and approaches on privacy and product security
• •Practical experience in highly regulated environment (FDA, SOx, Export, Privacy/GDPR, HIPAA)
• •Excellent knowledge of ISO27001/2 and NIST Cybersecurity frameworks
• •Experience working in a large global organization
• •Excellent understanding of business unit integration into strategic vision
• •Strong interpersonal skills – communication, presentation, ability to influence and lead
• •Motivated, positive attitude, and results-oriented
• •German Citizen
• •Fluency in German and English, additional languages an advantage

Tasks

• •Report on product security KPIs
• •Collaborate with Quality and Regulatory on product security processes
• •Understand key market regulatory requirements
• •Drive security standards across the business
• •Champion product security throughout the product lifecycle
• •Support information security training for product and program managers
• •Identify security risks in the product development lifecycle
• •Provide security requirements guidance to cross-functional teams
• •Address customer security requirements in products
• •Offer solutions based on security best practices and regulations
• •Conduct product security risk assessments
• •Develop risk mitigation and control plans for products
• •Complete static code analysis, penetration testing, and vulnerability assessments
• •Communicate risks and mitigation recommendations to senior management
• •Assist in developing customer security documentation and product labeling
• •Ensure compliance with Philips General Business Principles and information security policies
• •Support maintenance of external certifications and compliance with guidelines
• •Assist with internal audits and guide external audits for products and services