Product Security Incident Response Program Manager

🔥 34 minutes ago

🌐 Austria, Romania, +2 more countries – Remote

🇦🇹 Austria – Remote 🇷🇴 Romania – Remote 🇪🇸 Spain – Remote 🇬🇧 United Kingdom – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🛡️ Security Operations

👻 Ghost score 12%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

NXP Semiconductors

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 2006

🏭 Manufacturing

🔧 Hardware

🚘 Automotive

💰 Post-IPO Debt on 2025-01

Manufacturing • Hardware • Automotive

NXP Semiconductors is a global semiconductor company that provides innovative solutions for automotive, Internet of Things (IoT), and industrial applications. They specialize in microcontrollers, secure processors, and wireless connectivity, aiming to drive advancements in smart technologies and applications across various sectors. NXP's focus includes intelligent edge computing, secure authentication, and automotive technologies to meet the evolving needs of consumers and industries.

📋 Description

• Lead the operational response to reported vulnerabilities affecting NXP hardware and software products • Own and drive security cases from initial intake through assessment, remediation coordination, customer communication, and responsible disclosure • Establish response plans, milestones, ownership, dependencies, escalation paths, and communication cadence for assigned cases • Coordinate impact assessments and remediation planning across engineering, product management, quality, legal, communications, and customer-facing organizations • Track decisions, evidence, approvals, outstanding actions, and delivery risks • Facilitate vulnerability review meetings and drive actions to completion • Coordinate responsible and coordinated vulnerability disclosure with researchers, customers, partners, and relevant external organizations • Manage CVE reservation and publication workflows with technical subject-matter experts • Coordinate the creation, review, approval, and publication of security advisories and customer communications • Improve PSIRT procedures, templates, governance, and audit readiness • Support readiness for regulations such as the EU Cyber Resilience Act, future standards, and vulnerability-reporting obligations

🎯 Requirements

• Experience in Product Security, Embedded Security, Semiconductor Security, Cybersecurity, vulnerability management or technical engineering programs • 3 + years of relevant work experience • Strong understanding of vulnerability management, coordinated disclosure, incident handling, or product risk management • Ability to influence cross-functional stakeholders across engineering, product management, quality, and customer-facing teams • Demonstrated ability to coordinate complex investigations involving multiple technical and business organizations • Strong project or program management skills, including dependency management, risk tracking, escalation, prioritization, and reporting • Excellent communication skills and a passion for protecting innovative technology at scale • Familiarity with embedded products, semiconductor products, firmware, automotive, industrial, or IoT environments is advantageous • Fluent in English • PMP, PgMP, Scrum Master, SAFe, or other project/program management certifications are preferred, but not required • A conscious and reliable way of working is necessary because the role may involve security-related tasks and security certifications

🏖️ Benefits

• Home office • Flexible working time • Meal benefits • Market competitive compensation according to the benchmarking of the electronic and semiconductor industry (for applications in Gratkorn)