About this role
Jansbuitensingel 6-3 6811 AA Arnhem 026 206 7040 [email protected] Bedrijfsgegevens KvK: 9123494 Btw: NL865589793B01 Interim Product Security Manager - Amersfoort - 125 per uur - Interim Are you an experienced Product Security Manager with a strong background in the Cyber Resilience Act (CRA), embedded systems and industrial cybersecurity? This international technology organization is looking for a product security specialist who can combine cybersecurity, engineering and regulatory compliance and translate them into a practical security approach throughout the entire product lifecycle. You will have the opportunity to shape product security from the ground up and make a lasting impact on connected machines and digital products. Read on to learn more. This is what you will do as a Product Security Manager As a Product Security Manager, you are responsible for cybersecurity throughout the full lifecycle of connected machines, embedded systems and digital products. You develop the product security framework and translate requirements from the EU Cyber Resilience Act (CRA) into practical policies, standards and secure-by-design principles. Working closely with R&D, engineering, IT and QA, you make sure security is embedded in product development from the start. You define requirements for secure software development, security testing, SBOMs, technical documentation and secure IT/OT architecture. You also take the lead in product risk and vulnerability management, including vulnerability assessments, the Coordinated Vulnerability Disclosure (CVD) process and PSIRT. When vulnerabilities or incidents occur, you coordinate the response and ensure security updates, reporting and regulatory requirements are handled correctly. In addition, you oversee product cybersecurity compliance with regulations and standards such as the CRA, Machinery Regulation, NIS2 and IEC 62443. You work with suppliers, commercial teams and...