Product Security Manager

About the role

The Product Security Manager leads M-Files' Product Security team and serves as the technical security authority for all M-Files products and cloud services, including AI-native capabilities. This role blends hands‑on technical work with team leadership to define strategy, roadmap, and ensure security by design.

Key responsibilities

• Lead and prioritize the Product Security team’s work, set strategy and roadmap, and represent security in product planning.
• Coach developers and Security Champions, raise the technical security baseline across the company.
• Embed a secure development lifecycle, conduct threat modeling, security assessments, and AI‑assisted code reviews.
• Integrate SAST, DAST, SCA, and container scanning tools into CI/CD pipelines and manage software supply‑chain security (SBOM, dependency monitoring).
• Design and run the vulnerability advisory process, disclosure policies, and external penetration testing program.
• Own cloud security posture management on Azure, drive Microsoft Defender for Cloud recommendations, and contribute to cloud monitoring and incident response.
• Support customer‑facing security work and collaborate with Legal, Privacy, and Compliance on regulatory matters.

Required profile

• 5+ years of hands‑on product or application security experience at enterprise scale.
• Proven ability to lead or mentor a technical security team.
• Strong communication skills to translate technical concepts for non‑technical and executive audiences.
• Valid residency and work authorization in Finland.

Required skills

• Cloud‑native architectures, AKS/Kubernetes, container security, and cloud security posture management.
• Secure development lifecycle: threat modeling, OWASP ASVS/Top 10, SAST, DAST, SCA tooling.
• Vulnerability management, CVSS scoring, SBOM generation, and dependency monitoring.
• Experience with AI tools for security (AI‑assisted code review, threat modeling, reporting).
• Knowledge of security and compliance frameworks (SOC 2, ISO/IEC 27001, GDPR, NIS 2, CRA).
• Relevant security certifications (e.g., Microsoft SC‑100, AZ‑500, OSCP, CSSLP) are a plus.

What we offer

• Dynamic, supportive, international team culture where ideas matter.
• Clear career progression and personal development opportunities.
• Access to world‑class sales and marketing technology.
• Competitive salary and uncapped commission structure.
• Flexible remote work with occasional travel for team meetings and events.
• Opportunity to make a real impact at a fast‑growing, innovative company.