New Position: This position is open due to an existing vacancy to support our evolving business needs. Are you excited by the opportunity to secure products used by millions of professionals around the world? Join Thomson Reuters as a Manager, Product Security , where you will lead a senior team building the platforms, programs, and tooling that secure our products end-to-end.

The Product Security Manager leads our Product Security Core team, a group of senior engineers responsible for scaling security across Thomson Reuters' product portfolio. In this role, you will own the Secure Software Development Lifecycle for products, including threat modeling, security testing, software supply chain integrity, vulnerability identification and remediation, and secure design patterns. You will also lead our Secure AI program for AI-powered features shipped to customers, including how we review, red-team, and protect AI capabilities in production.

You will partner closely with product engineering, platform engineering, Security Architecture, GRC, IAM, Detection & Response, and business leaders to make security a seamless developer experience. This includes building self-service tools, automation, APIs, and AI-powered security capabilities that help thousands of engineers ship securely.

Location: Toronto, hybrid

About the Role

In this opportunity as AI Product Security Manager, you will:

• Lead and grow the Product Security team , managing, coaching, and developing a team of senior Product Security Engineers covering the full Secure SDLC across Thomson Reuters' product portfolio.
• Own and execute the Product Security program , including threat modeling, secure design, secure code reviews, security testing, software supply chain security, and vulnerability remediation across multiple products and cloud platforms.
• Lead Secure AI for products , defining how Thomson Reuters secures AI-powered customer features through Secure AI design reviews, AI red teaming, runtime protections, and actionable security patterns.
• Build and operate security automation and AI-enabled capabilities , including automated threat modeling, AI remediation agents, LLM security testing, and MCP-based capabilities for engineering teams.
• Scale security as a developer experience by delivering self-service security tooling, APIs, CI/CD-native controls, clear standards, implementation guidance, and security champion programs.
• Operate a security data and analytics layer that supports risk-based prioritization and measurable security outcomes across the enterprise.
• Partner across security, engineering, and the business to align priorities, support compliance requirements, and translate technical risk into business impact for senior leaders.

About You

You're a fit for the role of AI Product Security Manager if your background includes:

• 8+ years of experience in product security, application security, or software security engineering, including experience leading or managing senior security engineers.
• Demonstrated ownership of a Secure SDLC program across a multi-product engineering organization, including threat modeling, secure design, security testing, vulnerability management, and software supply chain security.
• Hands-on experience with at least one major cloud platform, such as AWS, Azure, or Google Cloud, including identity, networking, secrets management, data protection, and logging.
• Strong software engineering instincts, with the ability to read and write code in Python, Go, or similar languages and engage credibly with senior engineers on design and implementation.
• Working knowledge of GenAI and LLM security, including prompt injection, model and data integrity, agent and tool-use security, and