Job DescriptionTitle: Product Information Security Officer
NBand: E5
NLocation: Noida/Bangalore
NRole Overview
nTheProduct Information Security Officer (PISO) is responsible for embedding security into product design, development, and delivery. This role bridges product management and security, ensuring that information security is a core product requirement rather than a post-release consideration. The PISO champions security best practices, manages product risk, and drives a security-conscious product culture.
NKey Responsibilities
n1. Product Security Architecture & Design
N
- n
- Define and maintain product security architecture and threat models N
- Conduct threat modelingfor current features and systems N
- Lead security design reviews during product planning and architecture phases N
- Establish secure-by-default principles and baseline security controls N
- Review and approve authentication, authorization, and encryption strategies N

n2. Secure Development & Code Review
N
- n
- Establish secure coding standards and guidelines N




- Conduct security code reviews for high-risk features and components N
- Manage static application security testing (SAST) and dynamic testing (DAST) tools N
- Define and enforce secure SDLC practices (threat modeling, secure testing, secure deployment) N
- Partner with engineering to shift-left security and integrate security earlier in development N

n3. Vulnerability &Risk; Management
N
- n
- Coordinate vulnerability disclosure program N
- Manage product vulnerability lifecycle: triage, remediation, patch coordination N
- Track and prioritize security debt;
negotiate remediation timelines with product & engineering N
- Maintain product risk register and escalate critical risks to CISO and executive leadership N
- Perform periodic risk assessments and penetration testing N

n4. Compliance & Regulatory
N
- n
- Interpret compliance requirements (SOC 2, ISO 27001, NIS2, GDPR, CCPA) for product teams

📌 Product Information Security Officer (Faridabad)
🏢 HCLSoftware
📍 Faridabad