Apply Apply

Description

We are looking for a Product Security Officer to ensure top-tier security across our diverse product portfolio. Your role will involve establishing and enforcing robust product security practices, policies and processes to protect our client’s valuable assets. You'll identify and mitigate potential security risks by working closely with engineering teams, architects and stakeholders. Candidates with a background in the health industry are encouraged to apply.

What You’ll Do

• Provide strategic and tactical guidance to certain industry verticals, enhance operational security, encompassing roadmaps, new regulations and risk postures
• Coordinate with cybersecurity leads and security architects to implement security-by-design principles
• Work in alignment with the Cybersecurity Lead, Security Architect and product development team to establish robust security measures across all product verticals
• Monitor and report on KPIs to the digital product security office, ensuring a high level of compliance with standards and managing risk levels
• Drive the adoption and integration of security-by-design principles, collaborating closely with the verticals to ensure security is a core component of all products
• Lead and execute operational security practices with the Cybersecurity Lead and Security Architect to achieve/maintain certifications required by regulation/law/customers to operate in global markets
• Assist the Cybersecurity Lead, Security Architect & PSIRT team in response efforts during security incidents

What You Have

• Experience in Cybersecurity, Information Technology, Computer Science degree (Bachelors) or equivalent
• Expertise in a Product Security Officer role, ideally with a focus on IoT or healthcare technologies
• Proficiency in strategic and tactical guidance, risk management practices and understanding of software development for IoT device
• Solid knowledge of network access, identity, access management, applied cryptography, network security methodologies, secure software development methodologies
• Understanding of Risk and Compliance Management, Operational Models, Business Continuity Plans and Disaster Recovery Plans
• Proven track record of driving security excellence across diverse IoT portfolios, preferably in the healthcare domain

Nice to have

• Understanding of IoT device security in a healthcare or medical context
• Relevant certifications such as AWS Security Specialty, Azure Security Engineer, Google Cloud Security Engineer, Certified Kubernetes Security Specialist, CISSP, CCSP, SANS GIAC or similar qualifications
• Background with IoT security governance and IT general control frameworks such as ISO2700x, HIPPA, ISO 13485, NIST CSF, NIST 800-53, MDR (EU), etc

We Offer

• Salary range 5000-7200 EUR gross, based on your experience and interview results
• Outstanding career development roadmap to accelerate your journey
• Engineering community of industry’s top professionals
• Certification and mentoring programs, training, and unlimited access to LinkedIn Learning
• Innovative solutions delivery to the world’s industry leaders
• Regular assessments and salary reviews
• Bonuses for participating in the referral program
• Flexible schedule and opportunity to work remotely from any place in Latvia
• Friendly team and enjoyable working environment
• Relocation within offices in 50+ countries with throughout support for you and your family
• Four trust days a year (sick leave without a medical certificate)
• High-quality medical services in terms of corporate health insurance

About EPAM

• As consultants, designers, architects, engineers and trainers, at EPAM we focus on building long-term partnerships with our clients, enabling them to reimagine their businesses through a digital lens. We help our clients become faster, more agile and more adaptive enterprises, by delivering solutions through best-in-class engineering, strategy, design, consulting, education and innovation services