Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Head of Product Security (m/w/d) role.

Rezi rewrites your resume against CompuGroup Medical's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Head of Product Security (m/w/d) posting at CompuGroup Medical — free, in seconds.

About the Role

CGM is a leading company in software solutions for healthcare, operating in 19 countries with over 9,000 employees. We are looking for individuals passionate about AI in e-health to help shape the future of healthcare, making it smarter, simpler, and better. Join our mission to make a difference where knowledge saves lives.

Responsibilities

Define and own the product security strategy for the global portfolio.
Establish the policy framework for secure development, security baselines, and release criteria.
Drive CRA readiness across the entire portfolio, including product classification, conformity assessment, SBOM, and evidence processes.
Set the mandatory security tooling baseline (SAST, DAST, SCA, secrets scanning).
Define security quality gates within the delivery pipeline.
Shape the governance for AI-driven security remediation, including guardrails, approval criteria, and quality assurance.
Build the Security Guild and a network of Security Champions embedded in FIRE teams.
Foster lived security practice through training and coaching.

Requirements

Several years of experience in product security, application security, or as a deputy CISO within a complex, multi-product software organization.
Demonstrable, current expertise in the EU Cyber Resilience Act (requirements, classification logic, conformity assessment).
Working knowledge of NIS2 and GDPR.
Strong, practical knowledge of the secure development lifecycle, threat modeling, and application security testing.
Hands-on experience with SAST, DAST, SCA, and SonarQube tooling.
Experience with SBOM generation and governance.
Experience managing supply chain risk.
Understanding of AI-assisted and agentic development workflows.
Strong communication and stakeholder management skills to enforce standards without direct line authority.
Fluent in German and English, with excellent written and verbal communication skills.

Skills

Product Security
Application Security
EU Cyber Resilience Act
NIS2
GDPR
Secure Development Lifecycle
Threat Modelling
Application Security Testing
SAST
DAST
SCA
SonarQube
SBOM Generation
Supply Chain Risk Management
AI-assisted Development
Agentic Development Workflows
Communication
Stakeholder Management

Location

Koblenz

Work Type

Hybrid
Mobile work two days a week
On site three days a week

Experience Level

Several years of experience

Education Level

CISSP or an equivalent certification is an advantage

Benefits

Flexible mobile work
Fully equipped workplaces
Regular events (summer parties, Christmas parties)
In-house academy
External cooperation partners for development
In-house canteen with healthy dishes
Fully equipped fitness center with courses (online & offline)
Kindergarten on campus
Corporate benefits
Job bike option
Company pension scheme

About the Company

Leading company in software solutions for healthcare.
Operates in 19 countries.
Employs over 9,000 dedicated staff members.
Dynamic and innovative environment full of opportunities.
Leverages AI in the e-health environment.
Shaping the healthcare system of the future.

Equal Opportunity

Diversity is part of CGM!
We look forward to receiving your application regardless of disability, gender, nationality, ethnic and social background, religion, age, sexual orientation, and identity.