Senior Product Security Strategist

Work Schedule

Standard (Mon-Fri)

Environmental Conditions

Office

Job Description

When you’re part of the team at Thermo Fisher Scientific, you’ll do important work, like helping customers find cures for cancer, protecting the environment or making sure our food is safe. Your work will have real-world impact, and you’ll be supported in achieving your career goals!

What we do:

This role is a member of the Corporate Infrastructure & Security (CIS), Pre-Market Product Security, Strategy & Enablement team. Our job is to guide Thermo Fisher product development and sustainment teams in incorporating security concepts and controls in the design of new and existing consumer products and platforms.

Job Description:

The Senior Product Security Strategist serves as a strategic advisor and operational leader within the Pre-Market Product Security Strategy & Enablement team. This role partners with product and portfolio managers, R&D, software engineers, regulatory, and security stakeholders to help integrate security into product planning, development, and lifecycle management activities across a global portfolio of products.

The individual will help business teams understand cybersecurity risks, regulatory expectations, and ensure security activities are aligned to business priorities, product development timelines, and product criticality. They will drive consistency, scalability, and operational excellence across the Pre-Market Product Security program by connecting security strategy, governance, and execution.

Success in this role requires strong communication, relationship-building, strategic planning, and technical product security knowledge. The ideal candidate will be the operational and strategic connective tissue between Product Security Architecture, Research & Testing, Software Security, and the business stakeholders we partner with.

How will you make an impact?

By enabling our product development and sustainment teams, you will help ensure that Thermo Fisher products are developed, assessed, tested, maintained, and supported against security standards and evolving regulatory expectations, further helping our customers to make the world healthier, cleaner and safer!

Key Responsibilities

This role serves as the strategic and operational bridge between product teams and the Pre-Market Product Security organization. The individual will help drive security strategy, prioritize and coordinate security activities, and ensure product teams receive the right security support at the right time to meet business objectives, regulatory requirements, and customer expectations.

• Partner with product teams and business leaders to align product security activities with product roadmaps, business priorities, and risk.
• Develop and deliver product security strategy and guidance for products, platforms, and portfolios across the product lifecycle.
• Coordinate and prioritize security engagements, ensuring appropriate services such as architecture reviews, threat modeling, penetration testing, etc. are executed effectively.
• Translate cybersecurity requirements, regulations, and security risks into actionable guidance, recommendations, and escalation paths for stakeholders and leadership.
• Drive operational excellence through process improvement, service optimization, playbooks, governance, metrics, and cross-functional collaboration to create a seamless stakeholder experience.

How will you get here?

• Bachelor’s Degree in Information Assurance, Information Security, Management Information Systems, Computer Science, Engineering, or related technical field. Master’s Degree a plus. We will also consider equivalent field experience.

Experience:

• 7+ years of related work experience with any of the following: security analyst, product security, secure software development, security architecture, risk assessment, vulnerability management, threat modeling, application security, or cybersecurity regulatory support.
• Experience working with product development, engineering, product management, regulatory, quality, or business teams in a technical advisory or security assessment capacity.
• Experience supporting multiple product lines, business units, or regional stakeholders in a matrixed global organization a plus.
• Relevant certifications (e.g., Security+, CISSP, SSCP, GSEC, CISM, PMP, Agile, Scrum) are preferred.
• Experience mentoring, coaching, or technically leading others is preferred.

Knowledge, Skills, Abilities

The ideal candidate combines strong cybersecurity and product security knowledge with strategic thinking, operational leadership, and exceptional communication skills. They can effectively influence stakeholders, simplify complex topics, and drive security outcomes across a global and highly matrixed organization.

• Ability to rapidly understand products, technologies, business priorities, and regulatory considerations to determine the appropriate product security strategy and level of engagement.
• Ability to translate technical, security, and regulatory concepts into practical business guidance for both technical and non-technical audiences.
• Experience building partnerships, influencing stakeholders, and driving alignment across cross-functional teams and organizational levels.
• Strong program and project management skills with the ability to prioritize work, manage competing demands, and improve operational effectiveness.
• Familiarity with cybersecurity regulations, standards, and frameworks such as the EU Cyber Resilience Act (CRA), FDA cybersecurity guidance, NIST, OWASP, and secure-by-design principles.
• Strong understanding of product security principles, secure development practices, security architecture, threat modeling, vulnerability management, and risk assessment preferred.