Product Security Incident Response Program Manager (m/f/d)
Core
Lead operational response to reported vulnerabilities affecting NXP hardware and software products, managing cases from intake through disclosure.
Role type
Senior IC Product Security Incident Response Program Manager
Builds
Security advisories, customer communications, and coordinated vulnerability disclosure processes
Domain
Semiconductor / Embedded Security / Automotive / IoT
Deliverable
client delivery
Required skills
Vulnerability management, incident handling, program management, stakeholder coordination, risk tracking, CVE management, security advisory creation
Preferred skills
PMP, PgMP, Scrum Master, SAFe certifications, embedded/semiconductor/firmware/automotive/IoT domain knowledge
Technologies
CVE systems, security advisory platforms
Responsibilities
Own the operational lifecycle of product vulnerability cases, establish response plans and milestones, coordinate impact assessments and remediation planning, track decisions and delivery risks, facilitate vulnerability review meetings, coordinate responsible disclosure, manage CVE workflows, improve PSIRT procedures and governance, support readiness for regulations like the EU Cyber Resilience Act
Seniority
Senior, hands-on IC
