Product Security Officer / PSIRT Lead

We are looking for a Product Security Officer / PSIRT Lead to define and drive the company's product security strategy, ensuring cybersecurity and regulatory compliance across its technological solutions.

• The role will be responsible for establishing and managing the Product Security Incident Response Team (PSIRT), defining processes for vulnerability management, coordinated vulnerability disclosure and security incident response.

• The successful candidate will work closely with Engineering, Quality, Product Management and DevSecOps teams, integrating Security by Design principles and secure development practices throughout the entire solution lifecycle.

• They will contribute to defining and implementing security requirements, ensuring that development, release and maintenance activities comply with relevant standards and regulatory frameworks.

• The position will report directly to the CISO and will play a strategic role in developing and strengthening the company's Product Security function.

• Bachelor's or Master's degree in Computer Engineering, Electronics, Cybersecurity or a related technical field, or equivalent professional experience.

• At least 7 years of experience in Product Security, OT Cybersecurity or Industrial Cybersecurity.

• Proven experience with IEC 62443-4-1 and/or Cyber Resilience Act compliance programmes.

• Hands-on experience in PSIRT management, Coordinated Vulnerability Disclosure (CVD), vulnerability handling and security incident management.

• Solid understanding of firmware, embedded systems, industrial communication protocols and control system architectures.

• Experience implementing Secure Development Lifecycle (SDL) processes, threat modelling and Security by Design principles.

• Knowledge of secure boot mechanisms, secure firmware updates, system hardening and credential management.

• Ability to collaborate with multidisciplinary teams and communicate security risks and requirements to both technical stakeholders and senior management.

• Strong decision-making skills, including the ability to assess and block releases when security requirements are not met.

• Fluent English; Italian is considered a plus.

The selection process is based exclusively on skills, experience, and professional potential. We ensure equal opportunities and do not discriminate on the basis of gender, age, origin, orientation, disability, beliefs, or any other personal characteristic. We promote an inclusive, respectful work environment focused on valuing people.