Product Security Engineer

Responsibilities

• Ensure product security throughout the product lifecycle, including file transfer portals, internal databases, and production floors.
• Implement and enforce group security policies, standards, controls, and best practices to prevent product leaks and theft.
• Conduct risk assessments and implement corrective and preventive actions across all production and supply chain touchpoints.
• Collaborate with internal teams and subcontractor partners to ensure compliance with Cartamundi’s security standards.
• Monitor and audit the local security systems and processes, ensuring continuous improvement and alignment with industry best practices.
• Develop and maintain security metrics and dashboards to measure and report product and platform security performance.
• Manage the local security systems (CCTV, access control, intrusion detection); periodically review logs and events to identify production floor risks.
• Create a strong product security focus in the local company culture and educate external partners on product security procedures.
• Continuously monitor emerging product‑security threats, vulnerabilities, and attack vectors, and translate insights into actionable recommendations for Group Product Security team.
• Align with Group Product Security leadership and support continuous improvement initiatives.
• Lead local investigations into suspected breaches, counterfeiting, or IP theft, analyze root causes, and lead incident response and mitigation efforts.
• Be the local single point of contact/expert for all local security related matters.
• Coordinate with Legal, law enforcement, and external agencies when required.

• 5–8+ years in manufacturing security, loss prevention, or physical IP protection.
• Proven experience in security management, preferably in a manufacturing or product security-sensitive environment.
• Bachelor/Master in IT, engineering, product security or equivalent through experience.
• Additional certificates like CISSP, CISM, CISA, ASIS CPP/PSP, TAPA-knowledge are a plus.
• Knowledge of access control, CCTV, camera legislation, track & trace, anti‑theft designs.
• Strong understanding of physical and digital security systems, risk management, and compliance frameworks.
• Excellent analytical, investigative, and problem‑solving skills.
• Ability to work internationally, cross‑functionally and manage external partners.