> Markdown version of [/jobs/ext/4045361-product-security-incident-response-program-manager](https://www.wearedevelopers.com/jobs/ext/4045361-product-security-incident-response-program-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Product Security Incident Response Program Manager

- **Company:** NXP Semiconductors
- **Location:** Gratkorn, Austria
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Firmware, Scrum Methodology, Software Vulnerability Management, Software Security
- **Published:** October 28, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=b6950e8874a12e19

## About the Role

* Experience in Product Security, Embedded Security, Semiconductor Security, Cybersecurity, vulnerability management or technical engineering programs.
 * 3 + years of relevant work experience
 * Strong understanding of vulnerability management, coordinated disclosure, incident handling, or product risk management.
 * Ability to influence cross-functional stakeholders across engineering, product management, quality, and customer-facing teams.
 * Demonstrated ability to coordinate complex investigations involving multiple technical and business organizations.
 * Strong project or program management skills, including dependency management, risk tracking, escalation, prioritization, and reporting.
 * Excellent communication skills and a passion for protecting innovative technology at scale.
 * Familiarity with embedded products, semiconductor products, firmware, automotive, industrial, or IoT environments is advantageous.
 * PMP, PgMP, Scrum Master, SAFe, or other project/program management certifications are preferred, but not required.
 * Fluent in English

Please note: The successful candidate may/will be responsible for security related tasks. The assignment may/will be in scope of security certifications, therefore a conscious and reliable way of working is necessary.

## Description

This position focuses on program leadership, case management, stakeholder coordination, communication, and continuous improvement. You will bring together engineering, product management, quality, legal, communications, customer-facing teams, and external researchers to ensure that security issues progress toward a timely resolution., * Own the operational lifecycle of product vulnerability cases from intake through closure and disclosure.

 * Establish the response plan, milestones, ownership, dependencies, escalation path, and communication cadence for each assigned case.
 * Coordinate impact assessments and remediation planning across engineering, product management, quality, legal, communications, and customer-facing organizations.
 * Track decisions, evidence, approvals, outstanding actions, and delivery risks.
 * Facilitate vulnerability review meetings and drive actions to completion.
 * Coordinate responsible and coordinated vulnerability disclosure with researchers, customers, partners, and relevant external organizations.
 * Manage CVE reservation and publication workflows in coordination with technical subject-matter experts.
 * Coordinate the creation, review, approval, and publication of security advisories and customer communications.
 * Improve PSIRT procedures, templates, governance, and audit readiness.
 * Support readiness for upcoming regulations such as the EU Cyber Resilience Act (CRA), future standards and vulnerability-reporting obligations.