Lead Cybersecurity Product Engineer

The responsibilities and expectations for a professional specializing in security architecture and risk management within regulated environments. Key duties include conducting comprehensive risk assessments, developing and maintaining security frameworks, managing third-party risks, collaborating with cross-functional teams, and ensuring compliance with industry standards such as HIPAA, ISO, and NIST. The role involves continuous monitoring, reporting to senior management, and driving improvements in security posture. Candidates should demonstrate strong communication skills, expertise in regulatory compliance, and experience in vendor security assessments and risk management practices.

What will you be responsible for

• Conduct comprehensive security risk assessments for new and existing systems, applications, and network infrastructure.
• Develop, implement, and maintain security frameworks, standards, and best practices across the organization.
• Oversee third-party risk management (TPRM), including due diligence, assessment, and continuous monitoring of vendor security posture.
• Collaborate with IT, engineering, and business teams to identify and mitigate security risks in design and deployment.
• Perform Security Architecture reviews, risk assessments and gap analysis on critical assets and business processes.
• Advise stakeholders on security solutions and controls, ensuring alignment with regulatory and industry standards (e.g., HIPAA, Hi-Trust, ISO, NIST, GDPR).
• Respond to emerging threats and vulnerabilities by recommending and implementing proactive security measures.
• Prepare and deliver clear reports on architectural and risk findings to senior management. Support compliance initiatives and internal or external audits related to security and risk management.
• Drive continuous improvement in security architecture, risk practices, and awareness throughout the organization.
• Participate in special projects and other duties as assigned, driving ongoing improvement in security posture, risk management, and protection of sensitive information.

What would your work week be like

Who are we looking for

Key words : Security Architect, Risk Assessment, Risk Management, Vendor Security Assessment, Product Security Assessment, TPRM, Third Party Risk Management, AI Security,

Skills Required

Security Architecture, Regulatory Compliance, architecture reviews , Risk Management