Asthe ProductSecurity Lead of Materialise Software, you will be accountable for the overall security posture and regulatory compliance of our products. You translate complex security regulations, customer expectations, and risk into clear decisions, priorities, and trade-offs, enabling product and engineering teams to deliver securely at scale. You own the security outcomes and risk decisions, not day-to-day security implementation.

Key accountabilities and core responsibilities

Overall product security posture across our portfolio(CO-AM Platform,Magics)

Interpretation of security legislation, standards, and customer requirements

(e.g.,ISO 27001, NIS2, NIST-based frameworks)

Definition of product securityobjectivesand non-functional requirements

Explicit risk acceptance and exception management

Product security strategy, roadmap, and prioritization

External security posture towards customers, auditors, and regulators

Regulation and risk

Assess the applicability of security regulations and standards

Define pragmatic compliance intent and scopeIdentify, document, and accept residual product securityrisks[

Ensure risks and exceptions are explicit, time-bounded, and owned

Strategy and alignment

Define andmaintaina product security strategy aligned with business goals

Translate regulatory and risk drivers into a prioritized security roadmap

Align security priorities with product and engineering planning cycles

Cross-functional leadership

Partnercloselywith the

Product Management Team on roadmap alignment and customer commitments

Engineering Management Team on delivery realities and investment trade-offs

DevSecOpsLead on platform-level security objectives

Security Architect on translating intent into secure designs

CISO to align product security decisions with enterprise risk posture and regulatory obligations where applicable

Act as an escalation point when security, product, and delivery priorities conflict





Support the Engineering Delivery teams and Security Champions, such asimproving their understanding of the security checklist

Governance and external trust

Review security metrics and evidence produced by security engineering

Support audits, certifications, and customer security assessmentsRepresent the company's product security posture externally whenrequired

What this role does not do

Review code or manage vulnerabilities day-to-day

Directlymanagesecurity champions or software engineers

Your profile

Required skills and experience

Strong understanding of product and cloud security in modern DevOps environments

Experience working with security regulations and frameworks

(ISO 27001, NIS2, SOC 2, NIST, FedRAMP, or similar)

Proven ability to make and defend risk-based decisions

Credibility with senior engineering and product stakeholders

Clear written and verbal communication, especially around trade-offs

Experience profile

8+ years in software engineering, product security, or security leadership roles

Experience in product-centric, engineering-driven organizations

Exposure to regulated environments is strongly preferred

Success looks like

Security expectations are clear and predictable for product and engineering

Risk acceptance is explicit, documented, and rarely escalated late

Engineering teams ship securely by default using platform guardrails

Audits and customer security reviews are uneventful and well-prepared

What we offer

Healthy life-work balance

When creating a better and healthier world, a good place to start is with yourself. That's why we encourage our employees to prioritize their overall well-being, fostering physical fitness, mental resilience, and social connections through a range of workshops, sports activities, and other events and initiatives that contribute to a balanced and fulfilling work-life harmony.

Hybrid working & flexibility

Personal growth and career advancement

Team building

Innovation is key

Location and type of contract

Full-time

Hybrid

Mid-senior level

📌 Product Security Lead (Barcelona)
🏢 materialise
📍 Barcelona