AI Product Security Manager in Toronto

As a Product Security Manager, you will lead a team of senior security engineers within Thomson Reuters' Product Security function. You will help engineering teams across a diverse product portfolio build and deliver secure software, developing the capabilities and relationships that make security part of their daily work.

What You'll Do

• You will help shape the direction of our Product Security program and drive the execution, improvement, and scaling of our Secure Software Development Lifecycle (S-SDLC).
• You will own your team's roadmap and delivery, aligning priorities with Product Security leadership and responding to evolving risks and engineering needs.
• You will lead and develop your team, establishing ways of working that support clear ownership and effective delivery.
• Through coaching and regular feedback, you will support engineers' growth, while helping recruit and retain the talent the team needs.
• You will stay close to the technical work, challenging designs, guiding difficult trade-offs, and contributing directly where your experience adds the most value.
• Within your team's remit, you will improve our threat modelling, secure code review, security testing, and vulnerability remediation practices, while strengthening software supply chain security.
• You will also lead security education and champion initiatives, helping engineers across the organization recognize risks and apply practical mitigations.
• You will guide the team in building and operating security tooling and analytics, making security self-service and event-driven within the platforms and workflows engineers already use.
• You will contribute to our Secure AI program, helping secure customer-facing and internal AI systems from design reviews through runtime safeguards.
• You will also guide the development of AI agents and automation that scale security work, including threat modelling, security testing, and remediation.
• Working with Product Engineering, Platform Engineering, Security Architecture, and other Information Security & Risk Management functions, including Risk and Compliance, you will help improve security policies and standards, translating requirements into actionable guidance and reusable engineering patterns.
• You will support compliance across the product portfolio and explain technical risks in terms of business impact, helping senior engineering and product leaders make informed decisions.

About You

• Bachelor's degree in computer science, or equivalent practical experience.
• 8+ years of experience in product security, application security, or software security engineering.
• Proven experience managing or leading senior engineers, including coaching, career development, prioritization, and delivery.
• Strong software engineering and security foundations, with the judgment to challenge designs, discuss code, and balance security risks with engineering and business needs.
• Excellent written and verbal communication skills, with the ability to build alignment across teams and explain technical risks in terms of business impact.
• Curious and proactive, with the initiative to turn ideas into practical improvements and a commitment to sharing knowledge across teams and the broader security community.

Qualifications

• Experience delivering and improving S-SDLC practices across engineering teams, including secure design, threat modeling, code reviews, security testing, and vulnerability remediation.
• Experience with at least one major cloud provider (AWS, Azure, or GCP), including identity, networking, and secure configuration, alongside familiarity with containers.
• Experience building and integrating security tooling, APIs, and automation into developer workflows, including the use of SAST, SCA, and DAST.
• Understanding of software supply chain security and secure CI/CD, including dependency management, build integrity, and artifact integrity.
• Experience using security data and analytics to prioritize risk, guide remediation, and measure the effectiveness and adoption of security practices.
• Experience translating security policies, standards, and applicable compliance requirements into practical engineering guidance and controls.
• Working knowledge of AI and agentic system security, including prompt injection, model and data integrity, and controls for agent and tool use.

What’s in it For You?

• Hybrid Work Model: We’ve adopted a flexible hybrid working environment for our office-based roles while delivering a seamless experience that is digitally and physically connected.
• Flexibility & Work-Life Balance: Flex My Way is a set of supportive workplace policies designed to help manage personal and professional responsibilities, whether caring for family, giving back to the community, or finding time to refresh and reset.
• Career Development and Growth: By fostering a culture of continuous learning and skill development, we prepare our talent to tackle tomorrow’s challenges and deliver real-world solutions.
• Industry Competitive Benefits: We offer comprehensive benefit plans to include flexible vacation, two company-wide Mental Health Days off, access to the Headspace app, retirement savings, tuition reimbursement, employee incentive programs, and resources for mental, physical, and financial wellbeing.
• Culture: Globally recognized, award-winning reputation for inclusion and belonging, flexibility, work-life balance, and more.
• Social Impact: Make an impact in your community with our Social Impact Institute. We offer employees two paid volunteer days off annually and opportunities to get involved with pro-bono consulting projects and Environmental, Social, and Governance (ESG) initiatives.
• Making a Real-World Impact: We are one of the few companies globally that helps its customers pursue justice, truth, and transparency.