Head of Product Security (m/w/d)

CGM – Koblenz
As the leading company in the field of software solutions for healthcare, we operate in 19 countries and employ over 9,000 dedicated staff members. You define and own the product security strategy for our global portfolio and establish the policy framework for secure development, security baselines, and release criteria. You set the mandatory security tooling baseline (SAST, DAST, SCA, secrets scanning) and define security quality gates within the delivery pipeline. You shape the governance for our AI-driven security remediation (agentic OpenCode pipeline) – including guardrails, approval criteria, and quality assurance. You build the Security Guild and a network of Security Champions embedded in the FIRE teams, and foster lived security practice through training and coaching Several years of experience in product security, application security, or as a deputy CISO within a complex, multi-product software organisation. Strong, practical knowledge of the secure development lifecycle, threat modelling, and application security testing, together with hands-on experience with SAST, DAST, SCA, and SonarQube tooling. Strong communication and stakeholder management skills to enforce standards without direct line authority; Fluent in German and English, with excellent written and verbal communication skills. In addition to fully equipped workplaces, regular events such as summer parties and Christmas parties await you at our locations. Our in-house canteen offers a selection of tasty and healthy dishes every day, and we welcome you to our fully equipped fitness center for weekly courses (online & offline). We also offer corporate benefits, the option of a job bike, a company pension scheme, and much more. Apply online now with your detailed application documents (including salary expectations and earliest possible starting date).