AI Product Security Manager

About the Role  As a Product Security Manager, you will lead a team of senior security engineers within Thomson Reuters' Product Security function. You will help engineering teams across a diverse product portfolio build and deliver secure software, developing the capabilities and relationships that make security part of their daily work.
What You'll Do  In this role, you will help shape the direction of our Product Security program and drive the execution, improvement, and scaling of our Secure Software Development Lifecycle (S-SDLC). You will own your team's roadmap and delivery, aligning priorities with Product Security leadership and responding to evolving risks and engineering needs. You will lead and develop your team, establishing ways of working that support clear ownership and effective delivery.

Through coaching and regular feedback, you will support engineers' growth, while helping recruit and retain the talent the team needs. You will stay close to the technical work, challenging designs, guiding difficult trade-offs, and contributing directly where your experience adds the most value. Within your team's remit, you will improve our threat modelling, secure code review, security testing, and vulnerability remediation practices, while strengthening software supply chain security.

You will also lead security education and champion initiatives, helping engineers across the organization recognize risks and apply practical mitigations. You will guide the team in building and operating security tooling and analytics, making security self-service and event-driven within the platforms and workflows engineers already use. These capabilities will help teams identify and prioritize risk, act on findings, and measure the effectiveness and adoption of our security practices.

You will contribute to our Secure AI program, helping secure customer-facing and internal AI systems from design reviews through runtime safeguards. You will also guide the development of AI agents and automation that scale security work, including threat modelling, security testing, and remediation. Working with Product Engineering, Platform Engineering, Security Architecture, and other Information Security & Risk Management functions, including Risk and Compliance, you will help improve security policies and standards, translating requirements into actionable guidance and reusable engineering patterns.

You will support compliance across the product portfolio and explain technical risks in terms of business impact, helping senior engineering and product leaders make informed decisions.
About You  Bachelor's degree in computer science, or equivalent practical experience. 8+ years of experience in product security, application security, or software security engineering. Proven experience managing or leading senior engineers, including coaching, career development, prioritization, and delivery. Strong software engineering and security foundations, with the judgment to challenge designs, discuss code, and balance security risks with engineering and business needs.

Excellent written and verbal communication skills, with the ability to build alignment across teams and explain technical risks in terms of business impact. Curious and proactive, with the initiative to turn ideas into practical improvements and a commitment to sharing knowledge across teams and the broader security community.
Qualifications   Experience delivering and improving S-SDLC practices across engineering teams, including secure design, threat modelling, code reviews, security testing, and vulnerability remediation.

Experience with at least one major cloud provider (AWS, Azure, or GCP), including identity, networking, and secure configuration,…