Senior Product Security Specialist

A global technology group with a long-standing reputation for disciplined growth and long-term investment is expanding its product security capability following increased board-level focus and funding.

As products become more connected, software-driven, and deployed in operational environments, the organisation is strengthening how security and privacy are built into products from design through to deployment.

This is a newly created senior role, forming part of a multi-year, globally scoped programme with executive sponsorship.

The Senior Product Security Specialist will work across an international portfolio of engineering-led businesses, focusing on the security of products that combine hardware, software, and connected technologies.

The role is hands-on and assessment-led, with regular international travel to work directly with engineering and product teams in real-world environments.

Key Responsibilities

• Conduct threat modelling for software and hardware products, including embedded systems and industrial / operational technology environments
• Identify and assess design-stage security and privacy risks across the product development lifecycle
• Evaluate product security across:
• Embedded firmware and IoT products
• Web applications and digital services
• Supporting cloud and data processing components
• Perform structured product security assessments and provide clear, actionable remediation recommendations
• Communicate product security and privacy risks effectively to engineering teams and senior stakeholders

This role is focused on product security and secure product development, not SOC operations or compliance-only governance.

Experience Required

• Demonstrated experience securing products, rather than solely enterprise IT or cloud platforms
• Strong background in threat modelling across embedded, IoT, industrial, or software-driven products
• Solid understanding of secure product development lifecycles and privacy-by-design principles
• Comfortable working independently in complex engineering environments and influencing without authority
• Clear, professional communication skills suitable for senior technical and business audiences
• Willingness and ability to travel internationally on a frequent basis
• Experience applying recognised security standards and frameworks such as: ISO/IEC 27000, ISA/IEC 62443, NIST SP 800-218.

You will be expected to clearly articulate product security and privacy risks to senior technical and business stakeholders, providing insight that informs executive and board-level decision-making.

Apply or reach out for a confidential conversation.

#J-18808-Ljbffr