> Markdown version of [/jobs/ext/3511163-senior-director-deputy-chief-information-security-officer](https://www.wearedevelopers.com/jobs/ext/3511163-senior-director-deputy-chief-information-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Director, Deputy Chief Information Security Officer - **Company:** Straumann Group - **Location:** Madrid, Spain - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Applications Architecture, Software System Penetration Testing, Cyber Security, Software Engineering, Software Vulnerability Management, Spring Cloud, Software Security, Devsecops - **Published:** September 8, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=408635c2b62108ef ## About the Role * You bring significant leadership experience in cybersecurity, application security, product security or software security. * You have built or led application and product security capabilities in a complex enterprise environment. * You understand secure software development, DevSecOps, modern application architectures, cloud-native applications, APIs, identity, CI/CD pipelines and software supply-chain security. * You have experience with threat modelling, security architecture, penetration testing and vulnerability management. * You are confident engaging senior stakeholders, auditors and regulators, and can translate cybersecurity and regulatory requirements into practical, risk-based controls. * Experience in regulated environments is important; medical devices, healthcare, life sciences or manufacturing experience would be an advantage. * Knowledge of medical-device cybersecurity and secure product lifecycle requirements is strongly preferred. * Certifications such as CISSP, CISM, CSSLP, CCSP or equivalent are welcome, but not mandatory. What Makes You a Great Fit * You combine technical credibility with senior leadership judgement. You can challenge constructively, influence across organisational boundaries and focus teams on material product and software-security risks. * You are effective at turning complex security and regulatory topics into clear decisions, practical actions and measurable outcomes. ## Description As Senior Director, Deputy Chief Information Security Officer, you will be the operational partner to the Chief Information Security Officer and act on their behalf during periods of delegated absence. This role has a clear focus: strengthening application and product security across digital products, platforms and connected medical devices, while supporting the execution of Straumann Group's wider cybersecurity strategy. Your Role: * You will lead and mature the application and product security function, embedding secure software development practices across architecture, design, development, testing, release and post-market activities. * You will define and govern secure software development lifecycle requirements, security architecture reviews, threat modelling, application security testing, vulnerability remediation, software supply-chain security, SBOMs and third-party component governance. * You will oversee product vulnerability management, coordinated vulnerability disclosure and post-market cybersecurity monitoring, ensuring product-security requirements become practical engineering controls. * Working closely with Product Development, Engineering, Quality, Regulatory Affairs, Enterprise Architecture, Digital Trust & Assurance, Security Operations, Legal, Privacy and strategic technology partners, you will help ensure security risks, exceptions and remediation decisions are clearly documented and well governed. * You will also support the CISO in translating cybersecurity strategy into measurable execution, lead selected cross-functional security priorities, resolve issues across product and technology teams, and represent the CISO in internal or external forums when delegated. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Serverless Architectures with Spring Cloud Functions and Knative](https://www.wearedevelopers.com/videos/814-serverless-architectures-with-spring-cloud-functions-and-knative) - [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement) - [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Welcome to Switzerland](https://www.wearedevelopers.com/magazine/4-welcome-to-switzerland) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Is Switzerland Better Than Silicon Valley For Software Developers?](https://www.wearedevelopers.com/magazine/2-is-switzerland-better-than-silicon-valley-for-software-developers) - [Software Developer Salary in Switzerland [2023]](https://www.wearedevelopers.com/magazine/215-software-developer-salary-in-switzerland-2023)