Job DescriptionTitle: Product Information Security Officer
nBand: E5
nLocation: Noida/Bangalore
nRole Overview
nThe Product Information Security Officer (PISO) is responsible for embedding security into product design, development, and delivery. This role bridges product management and security, ensuring that information security is a core product requirement rather than a post-release consideration. The PISO champions security best practices, manages product risk, and drives a security-conscious product culture.
nKey Responsibilities
n1. Product Security Architecture & Design
n
- n
- Define and maintain product security architecture and threat modelsn
- Conduct threat modeling for new features and systemsn
- Lead security design reviews during product planning and architecture phasesn
- Establish secure-by-default principles and baseline security controlsn
- Review and approve authentication, authorization, and encryption strategiesn

n2. Secure Development & Code Review
n
- n
- Establish secure coding standards and guidelinesn




- Conduct security code reviews for high-risk features and componentsn
- Manage static application security testing (SAST) and agile testing (DAST) toolsn
- Define and enforce secure SDLC practices (threat modeling, secure testing, secure deployment)n
- Partner with engineering to shift-left security and integrate security earlier in developmentn

n3. Vulnerability & Risk Management
n
- n
- Coordinate vulnerability disclosure programn
- Manage product vulnerability lifecycle: triage, remediation, patch coordinationn
- Track and prioritize security debt; negotiate remediation timelines with product & engineeringn
- Maintain product risk register and escalate critical risks to CISO and executive leadershipn
- Perform periodic risk assessments and penetration testingn

n4. Compliance & Regulatory
n
- n
- Interpret compliance requirements (SOC 2, ISO 27001, NIS2, GDPR, CCPA) for product teamsn
- Build complianc

📌 Product Information Security Officer (Ghaziabad)
🏢 HCLSoftware
📍 Ghaziabad