Head of Product Cyber Security

About the role

The Head of Product Cyber Security will lead the protection of Mettler Toledo's products and customer‑facing digital services. Reporting to the Head of DBS‑Cybersecurity, you will work from the global operational headquarters in Greifensee, Switzerland, and collaborate closely with Application Security and compliance teams.

Key responsibilities

• Define and enforce product cybersecurity policies and procedures in line with compliance, digital business services, and product lifecycle management.
• Monitor legislative changes (e.g., EU Cyber Resilience Act, NIS 2, DFARS) and adjust security actions accordingly.
• Align vulnerability handling and disclosure management with international standards and continuously improve practices.
• Ensure product developers are aware of new application security controls throughout the development lifecycle.
• Conduct comprehensive cybersecurity assessments of products and digital services, prioritising high‑risk vulnerabilities.
• Support product teams in designing and implementing solutions to remediate identified vulnerabilities.

Required profile

• Bachelor’s degree in Computer Science, Cyber Security or a related field.
• Minimum 5 years of experience in secure application development, product security, and vulnerability management.
• Proven ability to influence stakeholders in a global matrix organisation.
• Excellent written and verbal communication skills in English.

Required skills

• Secure application development best practices and integration into product development processes.
• Application security tools and principles: DAST, SAST, integrated scanning, product penetration testing, vulnerability monitoring and prioritisation.
• Product security expertise: hardening embedded Debian Linux, industrial communication protocol security, network security, API security, application authentication security.
• Knowledge of product security legislation: EU Cyber Resilience Act, NIS 2, US DFARS.
• Familiarity with information security frameworks: ISO/IEC 27001, NIST.

What we offer

• Flexible working hours with a hybrid work model.
• 40‑hour work week, at least 25 vacation days plus additional days around bank holidays.
• Free parking, direct public‑transport access, and healthy onsite lunches with employee discounts.
• Wide portfolio of training opportunities and employee discounts at selected businesses.