About the role
ABOUT THE OPPORTUNITY
Our client is a fast-growing international insurtech building a leading technology-enabled ecosystem for protection and insurance. Operating across North America, Asia, and Europe, the company connects insurers, distributors, and customers to make buying and selling insurance simpler and more efficient. This is a unique opportunity to build a brand-new Product Security capability from the ground up at Group level, shaping how security is governed across every product, cloud platform, and emerging AI feature the organization delivers.
PROJECT & CONTEXT
Working under the direction of the Group Application Security Manager, you will build bolttech's Product Security program and roadmap from scratch, owning the end-to-end security posture of each product as a complete system — spanning application, cloud infrastructure, data, identity, integrations, operations, and compliance. Responsibilities include governing how products are deployed on cloud platforms such as AWS and Azure, overseeing multi-tenant data isolation, governing privileged and administrative access, ensuring audit-ready logging, and driving the product's compliance and customer-trust posture (certifications, due-diligence, security questionnaires). You will facilitate threat modelling and design reviews from the earliest stages of new products and features, prioritize remediation with product and engineering owners, and embed security requirements for AI-enabled capabilities — including generative AI, LLMs, and agentic features — alongside the AI Security function. You'll maintain a Group-wide view of risks and findings, collaborating closely with Application Security, Cloud Security, Security Architecture, Technology Risk, GRC, Privacy, and Legal teams.
WHAT WE'RE LOOKING FOR (Required)
At least 7 years of experience in product security, cloud security, security architecture, security governance, or related technical security roles
Strong understanding of how cloud-based and SaaS products are architected, deployed, and secured end-to-end (application, cloud, data, identity, operations)
Good understanding of cloud platform security (AWS and Azure), multi-tenant data isolation, and cryptographic data-protection concepts
Experience with product or system-level threat modelling, security design reviews, and risk prioritization/remediation
Good understanding of identity and access management, privileged access, APIs, authentication, authorization, and data-protection controls
Knowledge of security and compliance frameworks such as ISO 27001, SOC 2, NIST, and cloud security frameworks (e.g., CSA CCM)
Awareness of AI security risks, including generative AI, large language models, prompt injection, and data leakage
Strong analytical skills and ability to communicate technical and business risk clearly
Strong stakeholder-management skills, with the ability to influence product and engineering teams without direct authority
Fluent English (written and verbal), including the ability to explain security and compliance topics to both technical and non-technical stakeholders
NICE TO HAVE (Preferred)
Familiarity with AI security frameworks such as the OWASP Top 10 for LLM Applications, NIST AI RMF, ISO 42001, or AI red teaming
Experience building a security program, capability, or function from the ground up across a multi-entity or international organization
Familiarity with cloud security posture management (CSPM/CNAPP), multi-tenant SaaS security, or customer-trust and compliance assurance
Experience supporting compliance certifications (e.g., SOC 2 or ISO 27001) or customer security assurance/due-diligence processes
Relevant certifications such as CISSP, CCSP, AWS Certified Security – Specialty, Microsoft AZ-500, CISM, CRISC, ISO 27001, or AI security certifications
Compensation: €2,300 – €3,100/month net, depending on experience and seniority level.
Why HumanIT people stay (4.4 Glassdoor, 89% recommend)
- 15th month salary- Health insurance covering your family
- Birthday off
- Mobility program for digital nomads
- Real work-life balance
Full benefits
What it's really like
Originally posted on Himalayas