Product Owner Security

Antwerp - As a Product Owner IT Security at DPG Media you will be joining our IT Infrastructure & Security department. You will take up the Product Owner role and lead an agile team of 6 IT security platform engineers who are responsible for security technologies & services that help keep our intricate IT landscape cyber secure.

In addition to your Product Owner duties, you'll take on team leadership responsibilities such as learning & development, performance management & hiring of your team members - as well as vendor/supplier alignment

The team

With your team you help assure the effectiveness and performance of the security technologies and services under your responsibility. This includes helping our security technology stack remain state-of-the-art by continuously re-evaluating stakeholder requirements and new technology trends. Aside from managing security platforms, the team is also responsible for cyber security awareness.

With your security experience you can take up the role of coach for your team members and help them advise the IT community and end-users on the use of the security technologies and on how to apply security best practices in the areas of cloud infrastructures, on-premise IT components, end user systems, networks, etc.

Not only do you have the necessary technical knowledge and experience, you also show adequate communicative skills to support the teams and improve their security posture. You're not afraid to assist when it comes to less technical issues either such as strategy development, proofreading technical measures in contracts etc. You will directly report to the Area Manager IT Infrastructure & Security. You will assist the Area Manager in translating the DPG Media security roadmap to an actionable operational backlog followed up using agile/scrum based methodology. You know how to interpret security reports and you can give relevant and risk-based suggestions for solving security issues in the applications.

Some technologies in scope of the team: threat protection (EDR, NDR), vulnerability management, attack surface management, SIEM, email security, awareness platforms, ….

Your key responsibilities

As Product Owner

• Translate the DPG Media security roadmap, together with the Area Manager IT Infrastructure & Security, into a clear, risk-based and prioritised backlog.

• Lead the Scrum rhythm: refinement, sprint planning, daily stand-up, sprint reviews and retrospectives.

• Keep our security stack state-of-the-art by continuously reassessing the needs of internal users and new technology trends – including lifecycle decisions to extend, replace or retire tooling.

• Interpret security reports and assessment results and turn them into pragmatic, risk-based recommendations for IT and application teams.

• Own vendor and supplier relationships for the team’s services: roadmaps, renewals, SLAs and security clauses in contracts.

• Represent the team towards stakeholders and management: align priorities, report progress and showcase results.

As Team Lead

• Hire, onboard and develop the members of the SecurIT squad.

• Run performance and development conversations and support each engineer with a personal learning path.

• Coach the team – technically and in how they advise the IT community and end users on security best practices.

• Build a team culture of ownership, knowledge sharing and continuous improvement.

As security ambassador

• Champion security throughout the company and drive the Cyber Security Awareness programme.

• You advocate security best practices, ensure high attention to quality and uphold a high ethical standard.

Contribute to security strategy and support less technical topics when needed, such as policy input or reviewing security measures in contracts.

Job requirements

You love a fast-moving work environment and you gain energy from learning from each other and from the best in the trade. As a Product Owner you’ve got the ability to work independently with an eye for detail. As an agile expert you do this with an analytical, precise and reliable approach. Furthermore you bring knowledge on multiple of these IT security domains:

On-Premise Network Infrastructure, Perimeter Security (Firewall, DMZ, Reverse proxy)

Threat detection & response solutions (e.g. EDR, ITDR, NDR)

SIEM/XDR

IAM architecture

Vulnerability management

Cyber Threat intelligence

Cloud infrastructure security

Security incident management

Security awareness

And of course you are

A team player by heart, self assured and not afraid to address a large audience

You can convey a technical/security message in a n