In this role you drive end-to-end security certification for SUSE’s enterprise products, ensuring high-assurance compliance and timely delivery. You’ll translate security requirements into actionable milestones and coordinate with labs and certification bodies. You act as the main interface for evaluation labs and ensure rigorous documentation. The role blends security expertise with cross-functional project leadership to enable trusted, compliant cloud-native solutions at scale.
Compensaciones / Incentivos
- competitive compensation
- base salary plus target bonus
- attractive benefits package
Responsabilidades
- End-to-End Certification Ownership: manage complex certification cycles (e.g., Common Criteria, FIPS) from start to finish ensuring scope, schedule and quality.
- Milestone & Requirement Integration: convert SFRs/SARs into engineering milestones and monitor progress.
- Authority & Lab Interface: serve as primary contact for evaluation labs (ITSEFs) and cert bodies (BSI, NIAP, ANSSI).
- Cross-Functional Coordination: align compliance needs across Engineering, PM, external consultants, and partners.
- Secure Environment Rigor:
oversee projects handling sensitive data with audit-ready documentation.
- Knowledge Enablement: run events and enablement sessions to raise security awareness and standard adoption.
Requisitos principales
- 5+ years in software product development or enterprise IT infrastructure
- 1–2 years in product security compliance with focus on Common Criteria (NIAP VPP or GPOS) and familiarity with NIST/FIPS or ISO standards
- Familiarity with Linux, KVM, containerized virtualization, hyperconverged architecture, and security boundaries
- Experience with milestone execution and data-driven prioritization using Jira, Confluence, MS Project, and AI-assisted workflows
- Diplomatic and negotiation skills for managing labs and internal teams; fluent English; additional European languages a plus
- Credentials: PMP or GPM/IPMA level C/D
- Background check required
- Diplomacy and negotiation
- Clear written and spoken communication
- Cross-functional collaboration
- Linux operating systems
- KVM hypervisor
- Containerized virtualization