Job DescriptionTitle: Product Information Security Officer
nBand: E5
nLocation: Noida/Bangalore
nRole Overview
nThe Product Information Security Officer (PISO) is responsible for embedding security into product design, development, and delivery. This role bridges product management and security, ensuring that information security is a core product requirement rather than a post-release consideration. The PISO champions security best practices, manages product risk, and drives a security-conscious product culture.
nKey Responsibilities
n1. Product Security Architecture & Design
n
n
Define and maintain product security architecture and threat modelsn
Conduct threat modeling for recent features and systemsn
Lead security design reviews during product planning and architecture phasesn
Establish secure-by-default principles and baseline security controlsn
Review and approve authentication, authorization, and encryption strategiesn

n2. Secure Development & Code Review
n
n
Establish secure coding standards and guidelinesn




Conduct security code reviews for high-risk features and componentsn
Manage static application security testing (SAST) and agile testing (DAST) toolsn
Define and enforce secure SDLC practices (threat modeling, secure testing, secure deployment)n
Partner with engineering to shift-left security and integrate security earlier in developmentn

n3. Vulnerability & Risk Management
n
n
Coordinate vulnerability disclosure programn
Manage product vulnerability lifecycle: triage, remediation, patch coordinationn
Track and prioritize security debt; negotiate remediation timelines with product & engineeringn
Maintain product risk register and escalate critical risks to CISO and executive leadershipn
Perform periodic risk assessments and penetration testingn

n4. Compliance & Regulatory
n
n
Interpret compliance requirements (SOC 2, ISO 27001, NIS2, GDPR, CCPA) for product teamsn
Build complianc

📌 Product Information Security Officer Ghaziabad
🏢 HCLSoftware
📍 Ghaziabad