Job Description

ABOUT THE OPPORTUNITY

Our client is a fast-growing international insurtech building a leading technology-enabled ecosystem for protection and insurance. Operating across North America, Asia, and Europe, the company connects insurers, distributors, and customers to make buying and selling insurance simpler and more efficient. This is a unique opportunity to build a brand-new Product Security capability from the ground up at Group level, shaping how security is governed across every product, cloud platform, and emerging AI feature the organization delivers.

PROJECT & CONTEXT

Working under the direction of the Group Application Security Manager, you will build bolttech's Product Security program and roadmap from scratch, owning the end-to-end security posture of each product as a complete system — spanning application, cloud infrastructure, data, identity, integrations, operations, and compliance. Responsibilities include governing how products are deployed on cloud platforms such as AWS and Azure, overseeing multi-tenant data isolation, governing privileged and administrative access, ensuring audit-ready logging, and driving the product's compliance and customer-trust posture (certifications, due-diligence, security questionnaires). You will facilitate threat modelling and design reviews from the earliest stages of new products and features, prioritize remediation with product and engineering owners, and embed security requirements for AI-enabled capabilities — including generative AI, LLMs, and agentic features — alongside the AI Security function. You'll maintain a Group-wide view of risks and findings, collaborating closely with Application Security, Cloud Security, Security Architecture, Technology Risk, GRC, Privacy, and Legal teams.

WHAT WE'RE LOOKING FOR (Required)

• At least 7 years of experience in product security, cloud security, security architecture, security governance, or related technical security roles
• Strong understanding of how cloud-based and SaaS products are architected, deployed, and secured end-to-end (application, cloud, data, identity, operations)
• Good understanding of cloud platform security (AWS and Azure), multi-tenant data isolation, and cryptographic data-protection concepts
• Experience with product or system-level threat modelling, security design reviews, and risk prioritization/remediation
• Good understanding of identity and access management, privileged access, APIs, authentication, authorization, and data-protection controls
• Knowledge of security and compliance frameworks such as ISO 27001, SOC 2, NIST, and cloud security frameworks (e.g., CSA CCM)
• Awareness of AI security risks, including generative AI, large language models, prompt injection, and data leakage
• Strong analytical skills and ability to communicate technical and business risk clearly
• Strong stakeholder-management skills, with the ability to influence product and engineering teams without direct authority
• Fluent English (written and verbal), including the ability to explain security and compliance topics to both technical and non-technical stakeholders

NICE TO HAVE (Preferred)

• Familiarity with AI security frameworks such as the OWASP Top 10 for LLM Applications, NIST AI RMF, ISO 42001, or AI red teaming
• Experience building a security program, capability, or function from the ground up across a multi-entity or international organization
• Familiarity with cloud security posture management (CSPM/CNAPP), multi-tenant SaaS security, or customer-trust and compliance assurance
• Experience supporting compliance certifications (e.g., SOC 2 or ISO 27001) or customer security assurance/due-diligence processes
• Relevant certifications such as CISSP, CCSP, AWS Certified Security – Specialty, Microsoft AZ-500, CISM, CRISC, ISO 27001, or AI security certifications
  

Compensation: €2,300 – €3,100/month net, depending on experience and seniority level.

Why HumanIT people stay (4.4 Glassdoor, 89% recommend)

- 15th month salary- Health insurance covering your family

- Birthday off

- Mobility program for digital nomads

- Real work-life balance

Full benefits https://www.humanit.pt/careers/#perks

What it's really like https://www.humanit.pt/careers/#work-at