Global Principal Product and Solutions Security Officer (m/f)

We‘re the Yunex Traffic team, a global leader in intelligent traffic systems. We have been working on revolutionary technologies for the mobility of the future. We develop solutions for traffic management leading to greater traffic flow, safety, efficiency, and environmental friendliness. The results of our work are perceived by citizens in cities around the world.

 

Who are we looking for?

The Global Principal Product and Solutions Security Officer (P-PSSO) will ensure robust security practices across Yunex’s global product portfolio and infrastructure deployments for our customers worldwide. He/she will manage a central team of PSS experts and provide governance to a global group of PSSO in our local entities and business units. This role is critical in safeguarding our cloud-hosted platforms, on-premise systems, and connected devices against evolving cyber threats, while ensuring compliance with industry standards and regulatory requirements. 

 

What will be your responsibilities?

 

• Run and improve the global governance and compliance system for Product and Solution Security.
• Implement and enforce security controls on our core business processes for Product Lifecycle Management as well as Project Management.
• Define and enable implementation of security requirements across our product portfolio, ensuring compliance with customer requirements, norms, and applicable regulations to each market (e.g. ISO 27001, IEC 62443, Cyber Resilience Act, and NIS2).
• Provide guardrails and training to our global engineering teams on a secure development lifecycle.
• Definition and enforcement of security requirements on our global DevSecOps tool chain (Gitlab, Artifactory, Sonarqube, Jira, Confluence etc.).
• Responsible for the delivery of centrally managed security services to product and field customer service teams, such as vulnerability scans (SAST, DAST, and SCA), hardening benchmarks, and external penetration testing.
• Oversee and improve risk assessments and threat modeling for our product portfolio, project deployments and hosting solutions as well as individually developed customer project solutions.
• Cooperate with local PSSOs and country or business unit managing directors.
• Regularly report top risks and mitigation strategies for the PSS domain to CTO and management board.
• Act as the security lead during product and customer project related security incidents.

 

What do you need to qualify for the role?

 

• Master’s degree in computer science, computer engineering, cybersecurity, and STEM courses.
• 10+ years of experience in the field of cybersecurity.
• Experience to engage with top-level management (country Managing Directors and group Managing Board C-Level).
• Fluent in English C1-Level (You will be part of an international team).
• Solid understanding of European security regulations and directives such as the NIS2, Cyber Resilience Act, RED and AI Act.
• Security first mindset and great communication skills, able to clearly express cybersecurity in simple terms with other functions.
• Experience with DevOps practices and tools.
• Clear understanding and experience with vulnerability management (SAST, DAST, and SCA).
• Experience in securing IT and OT systems, including industrial control systems, next-generation firewalls and zero trust architectures.
• Solid understanding and experience with IEC 62443, ISO 27001 ISO 27005, 27017 and EN 18031.
• Experience with cloud computing and secure cloud architecture. Familiarity with key cloud services (AWS, Azure, GCP).
• Project management skills. Familiarity with Scaled Agile Framework. Track record of successful project delivery in a complex environment.
• Proven experience with team management (team up to 10 members) and role of first line manager.

 

 Additional skills we value (not required)

 

• German language is a plus.

• GICSP, OSCP, CISSP, CEH certifications.
• AWS, Azure, GCP Certified Solutions Architect.
• Experience with Public Key Infrastructure solutions.

 

With joining us, among oth