Senior Product Security Manager

About the role

Mitel is looking for a Senior Product Security Manager to lead its Product Security engineering team and drive continuous improvement in secure development practices, vulnerability management and software supply chain security across its products and cloud services. The role combines organizational leadership with hands-on technical leadership, working with development teams, DevOps, product management, customer-facing units and senior leadership.

Key responsibilities

• Lead continuous improvement of the Secure Development Lifecycle (MiSDLC), covering secure design, security testing, vulnerability management and supply chain security.
• Lead and manage the Product Security team, including objectives, priorities, workload allocation, performance management and delivery.
• Promote security requirements and secure development practices across R&D and DevOps, and enable measurable security improvements.
• Develop and maintain security policies, governance, standards, metrics and reporting, aligned with regulatory requirements.
• Support the Product Security Incident Response Team (PSIRT) with vulnerability triage, remediation planning, communications and incident response.
• Act as a subject matter expert for development teams, and represent Product Security in customer engagements, escalations, audits and assessments.

Required profile

• Engineering or Computer Science degree or equivalent technical experience.
• Minimum 9 years of experience in software development, systems engineering, product security or related roles, including 3 years with technical and/or team leadership.
• Demonstrated experience with SDLC, vulnerability management, incident response and supply chain security in product and cloud environments.
• Excellent communication and stakeholder management skills, and excellent written and verbal English.

Required skills

• Application security, cloud security, secure software development, vulnerability management and software supply chain security.
• Advantageous: VoIP and communications applications, hybrid cloud architectures, ISO 27001, SOC 2, GDPR, NIS2, and certifications such as CISSP, CSSLP or CCSP.

What we offer

• Competitive remuneration package.
• Flexible working hours and a hybrid working model.
• Meal vouchers, private health insurance and an additional paid day off each year.
• 24/7 psychological support line.