Product Security Analyst, Thomson Reuters

• Are you ready to launch your security career while working alongside experienced professionals on cutting-edge security challenges, including AI security
• Do you want to help build a robust security culture at a global company trusted by millions?
• 1–3+ years of experience in program/project management and coordination, security operations, or supporting technical teams
• Familiarity with product security practices, secure-by-design principles, or security awareness and enablement programs
• Proven experience coordinating meetings, tracking action items, and managing stakeholder communications
• Proficiency using dashboards, backlog management tools, and collaboration platforms (e.g., Jira, Confluence, Teams, or similar)
• Strong communication and organizational skills with an emphasis on structured follow-through and attention to detail
• Demonstrated interest in fostering security culture and collaborating effectively with product and engineering teams

Desirable

• This position is open due to an existing vacancy to support our evolving business needs
• Join Thomson Reuters as a Product Security Analyst, where you'll play a vital role in operationalizing key security programs including Security By Design, security reviews, and our Security Guardians (security champions) initiative
• This is an excellent opportunity for early-career security professionals to grow their expertise while contributing to the security of our diverse product portfolio that serves legal, tax, compliance, and news professionals worldwide
• Manage security-by-design governance by scheduling and facilitating security reviews across different risk types (AI, cloud) and tracking progress against SLAs
• Drive the Security Guardians program by coordinating meetings, training sessions, community events, and developing security enablement materials for product and engineering teams
• Collaborate across security teams including Security Architecture, Product Security, Red Teaming, and Pentest to align priorities and facilitate communication with stakeholders
• Track and report on security activities using dashboards, backlog management tools, and collaboration platforms while ensuring compliance with service level agreements
• Support security awareness initiatives by creating and distributing playbooks, quick-reference guides, and communications to foster security culture
• Contribute to process improvement by refining reporting processes, developing runbooks, and enhancing security workflows in partnership with data engineering teams
• Maintain program artifacts including participant lists, onboarding materials, communication templates, and collecting feedback to identify improvement opportunities