Overview
Mitel is seeking a Senior Product Security Manager to lead a Product Security engineering team and drive continuous improvement in Mitel's secure development practices, vulnerability management program, and software supply chain security across Mitel's products and cloud services. The role combines organizational leadership with hands-on technical leadership in Product Security.
You will lead and develop a team of Product Security professionals while working closely with development teams, DevOps, Product Management, customer-facing organizations, and senior leadership to strengthen Mitel's product security posture. You will be accountable for team priorities, resource planning, execution, and capability development while continuing to provide technical leadership on key Product Security initiatives. You will identify and champion security improvement initiatives, support engineering teams adopt effective security practices, and represent Product Security in customer engagements, security escalations, and compliance activities.
The ideal candidate is a collaborative results-driven security professional with a strong software development, systems engineering, or product security background. You are comfortable driving new security initiatives, managing operational responsibilities, and staying current with evolving technologies, threats, AI innovations, and regulatory requirements.
Responsibilities
•Lead continuous improvement in Mitel's Secure Development Lifecycle (MiSDLC), including secure design, security testing, vulnerability management, and software supply chain security, aligning recommendations with product security strategy and business objectives.
•Lead and manage a Product Security team, with responsibility for objectives, priorities, workload allocation, performance management, and delivery against Product Security commitments.
•Drive adoption of security requirements and secure development practices across R&D and DevOps organizations, providing virtual leadership, influencing stakeholders, and enabling measurable improvements in security outcomes.
•Develop and maintain product security policies, governance processes, standards, metrics, and stakeholder reporting, recommending enhancements to support product security objectives and regulatory requirements.
•Lead the evolution of security practices to address emerging technologies, evolving threat landscapes, AI-enabled products, AI-assisted development, and new industry and regulatory requirements, providing recommendations and driving implementation of improvements.
•Provide technical and operational support for Mitel's Product Security Incident Response Team (PSIRT), including vulnerability triage, remediation planning, security communications, and incident response activities.
•Act as a product security subject matter expert providing guidance and support to development teams adopting secure development practices, implementing security and privacy requirements, and addressing vulnerability remediation in products, cloud services, and design environments.
•Represent Product Security in customer-facing security engagements, leading technical discussions, supporting escalations, audits, and security assessments, and coordinating responses with internal stakeholders.
Mandatory Requirements
•Relevant Engineering or Computer Science degree or equivalent technical experience.
•Minimum 9 years of experience in software development, systems engineering, product security, or related technical roles, including 3 years with technical and/or team leadership responsibilities.
•Demonstrated experience implementing and advancing Secure Development Lifecycle (SDLC) practices, vulnerability management, incident response, and software supply chain security in product and cloud service environments.
•Strong knowledge of application security, cloud security, secure software development, vulnerability management, and software supply chain security.
•Excellent communication and stakeholder management skills with experience engaging development teams, senior leadership, customers, and external security stakeholders.
•Excellent written and verbal English communication skills.
Additional Skills (Advantageous)
•Knowledge of VoIP, communications and collaboration applications.
•Experience with hybrid cloud architectures and customer deployment models spanning cloud and on-premises environments.
•Experience supporting compliance and regulatory requirements such as ISO 27001, SOC 2, GDPR, NIS2, or similar frameworks.
•Professional security certification such as CISSP, CSSLP, CCSP, or equivalent.
Benefits
•Competitive remuneration package
•Flexible working hours
•Hybrid working model
•Meal vouchers
•Private health insurance coverage
•Additional paid day off every year
•24/7 psychological support line
