Senior Manager Product Security
Senior Manager Product Security
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Job Description
About Workato
Workato transforms technology complexity into business opportunity. As the leader in enterprise orchestration Workato helps businesses globally streamline operations by connecting data processes applications and experiences. Its AIpowered platform enables teams to navigate complex workflows in realtime driving efficiency and agility.
Trusted by a community of 400000 global customers Workato empowers organizations of every size to unlock new value and lead in todays fastchanging world. Learn how Workato helps businesses of all sizes achieve more at .
Why join us
Ultimately Workato believes in fostering a flexible trustoriented culture that empowers everyone to take full ownership of their roles. We are driven by innovation and looking for team players who want to actively build our company.
But we also believe in balancing productivity with selfcare. Thats why we offer all of our employees a vibrant and dynamic work environment along with a multitude of benefits they can enjoy inside and outside of their work lives.
If this sounds right up your alley please submit an application. We look forward to getting to know you!
Also feel free to check out why:
Business Insider named us an enterprise startup to bet your career on
Forbes Cloud 100 recognized us as one of the top 100 private cloud companies in the world
Quartz ranked us the #1 best company for remote workers
Responsibilities
Workato is looking for an exceptional security leader to establish and lead a global security team responsible for Workatos product and infrastructure security.
The Senior Manager of Product Security is a handson leader responsible for leading the product security efforts across our entire product line. This role requires a unique blend of realworld experience and theoretical knowledge in various aspects of software security including but not limited to application security cloud security secure coding practices and security architecture. The ideal candidate will have a proven track record of handson security work and the ability to lead a team of security professionals.
In this role you will also be responsible to:
Lead the companys development and implementation of a comprehensive product security strategy.
As a handson leader manage and mentor a team of security engineers and analysts providing guidance and direction for their professional growth.
Identify develop implement and maintain security programs and processes across product development and production environments.
Define strategic direction set objectives and structure and resource the organization and the work in a way that improves the teams impact and provides a paved path to a leadership position among SaaS providers including application security infrastructure security and data security.
Oversee critical cybersecurity areas including incident response disaster recovery awareness monitoring remediation information governance and digital security.
Lead all product security operations that protect against immediate threats and respond when something goes wrong.
Grow the product security programs and capabilities to an industryleading position finding opportunities to improve our existing approach and helping to guide the team to unlock that potential.
Build strong relationships within the product engineering and operations teams to implement the appropriate security controls to protect Workatos applications infrastructure and data.
Communicate effectively with stakeholders at all levels about the security posture of products and the importance of product security.
Develop and oversee the development and enforcement of security policies and procedures based on industrystandard best practices.
Partner closely with executive leadership to ensure that all applications and platforms are developed with security in mind and that appropriate security controls have been implemented while driving continuous investment into the cybersecurity areas.
Utilize businessrelevant metrics to measure the programs efficiency and effectiveness facilitate appropriate resource allocation and increase the security programs maturity.
Work closely with internal stakeholders and business units to keep abreast of planned changes to technologies working practices and business activities that could impact the organizations Information Security or risk profile.
Support continued compliance with SOC2 HIPAA and other currently required standards and act as Product and Engineering technical lead within product security to expand certifications to include PCI NIST800171 ISO27001/277001 and FedRAMP. Ensure operation of related controls. Coordinate the provision of required evidence for audit.
Lead incident response activities and postmortem analysis for any security breaches or incidents liaising with the Legal Security and Privacy teams on data protection ensuring root causes of such breaches are understood and addressed.
Conduct handson security assessments code reviews and penetration testing to identify product vulnerabilities and security gaps as needed.
Leverage Workato as an automation solution for SOAR GRC and other securityrelated use cases.
Requirements
Qualifications / Experience / Technical Skills
Minimum of 5 years of experience in product security application security or a related field.
Handson experience designing and deploying security controls across all security domains such as access management data protection vulnerability management incident response and management application security network security preventive detective and offensive security solutions.
Deep understanding of security principles techniques and technologies such as OWASP Top 10 SANS Top 25 encryption identity and access management network security and cloud security.
Familiarity with compliance frameworks and standards such as ISO 27001 SOC 2 GDPR and CCPA.
An understanding of Application Security threats and countermeasures
Practical knowledge of security technologies especially those applying to SaaS Web applications and wider business solutions including Firewalls IDS/IPS Identity and access management SIEM Data Loss Protection BCP and Cloud Security
Ability to provide strategic product security mentorship based on experience performing threat modeling and design reviews to assess security implications and requirements
Bachelors or Masters degree in Computer Science Information Security or a related field.
Relevant security certifications (e.g. CISSP OSCP CEH) are a plus.
Soft Skills / Personal Characteristics
Outstanding interpersonal and communication skills; ability to communicate information successfully internally and externally and to drive multifunctional alignment and action
Excellent people leadership skills providing direction monitoring performance motivating staff and building a positive working environment
(REQ ID: 1923
Required Experience:
Senior Manager
Employment Type
Full Time
