Principal Software Security Officer

Define the standards. Challenge the risks. Strengthen our software security. Secure software does not happen by accident. At Giesecke+Devrient Currency Technology, we develop technologies and solutions that help create trust worldwide. From digital products and manufacturing systems to complex software platforms operating in highly sensitive environments, security is not an add-on. It is a fundamental requirement. That’s why we’re looking for someone who thinks about software security holistically. Someone who doesn’t just identify risks but establishes standards. Someone who empowers teams to build secure software. Someone who sees security as an enabler of innovation rather than a barrier to it. As a Principal Software Security Officer, you will be part of our multidisciplinary Global Security organization. Operating independently from development teams, you will help shape the future of secure software development across G+D. Your Mission You will own the governance and continuous evolution of our Secure Software Development Lifecycle (SSDLC). Working closely with engineering, architecture, product management, and security teams, you will ensure that Security by Design becomes an integral part of the entire software lifecycle.

Your Responsibilities

• Establish, evolve, and oversee our Secure Software Development Lifecycle (SSDLC)

• Define software security standards, policies, and processes across the organization

• Advise development and architecture teams on Security by Design principles

• Conduct threat modeling exercises, risk assessments, and security reviews

• Assess software architectures, APIs, cloud solutions, and integration concepts from a security perspective

• Embed security requirements into development processes, CI/CD pipelines, and release workflows

• Define and oversee security gates and security acceptance criteria

• Evaluate third-party software, open-source components, and software supply chains

• Support security testing, vulnerability management, and risk remediation activities

• Coach and mentor developers, architects, and Security Champions on secure development practices

• Contribute to audits, supplier assessments, and customer-facing security assurance activities

• Assess emerging technologies, cloud services, and AI-assisted software development from a security perspective

What Matters Most to Us We’re not looking for someone who already masters every aspect of this role. What matters most is your ability to understand complex technical challenges, ask the right questions, and work collaboratively to develop practical and sustainable solutions. You may come from software engineering, software architecture, application security, product security, or another technical discipline. You may already have experience with secure software development and be looking for the next step in your career. If this opportunity excites you, we’d love to hear from you, even if your experience doesn’t match every single item listed below. We actively invest in the professional and personal development of our employees and are committed to helping you grow and realize your full potential.

• A degree in Computer Science, Information Security, Software Engineering, or a comparable qualification

• Experience in software engineering, software architecture, application security, product security, or a related technical field

• A genuine interest in secure software development and modern software architectures

• Knowledge of some of the following areas:

• Secure Software Development Lifecycle (SSDLC)

• Application Security

• Threat Modeling

• Secure Coding

• Cloud Security

• DevSecOps

• Security Testing

• Vulnerability Management

• Familiarity with industry frameworks and standards such as:

• OWASP SAMM

• OWASP ASVS

• NIST SSDF

• IEC 62443-4-1

• OWASP Top 10

• CWE

• Strong analytical thinking and a structured approach to problem solving

• Excellent communication skills and the ability to collaborate across diverse teams

• Strong written and spoken English skills

G+D makes the lives of billions of people around the world more secure. We create trust in the digital age with integrated security technologies in three business areas: Digital Security, Financial Platforms and Currency Technology. We have been a reliable partner for our customers for over 170 years with our innovative solutions for SecurityTech! We are an international technology group and traditional family business with over 14,000 employees in 40 countries. Creating Confidence is our path to success. Trust is the basis of our co-operation within G+D.

The whole world trusts us when it comes to physical or digital currencies. We increase the security and efficiency of the cash cycle in collaboration with central banks and the entire currency industry. As the market leader in advanced currency management, would you like to join us in shaping the future of payments?