Director, Global Product Security

This is a fully remote position, open to applicants in Illinois, +1 more state.

📋 Description

• Define and spearhead the comprehensive product security strategy and governance framework across various product lines and geographical locations.

• Create a scalable product security framework, including policies, standards, engineering requirements, a maturity model, metrics, and adaptability for different business units.

• Collaborate with senior engineering and business leaders to embed security into product lifecycles and business decision-making processes.

• Foster accountability between the central Product Security organization and product development teams.

• Offer expertise in threat modeling, attack-surface analysis, security architecture and design evaluations, risk assessments, vulnerability analysis, and security testing.

• Develop and enhance a Secure Product Development Lifecycle incorporating risk-based security gates, evidence requirements, exceptions, and acceptance criteria.

• Establish and manage a global Product Security Incident Response Team, which includes vulnerability intake, triage, investigation, severity and prioritization, remediation coordination, and disclosure processes.

• Advance practices related to SBOM, software composition analysis, open-source security, and software and product supply-chain security.

• Convert industry, regulatory, contractual, and customer expectations into actionable engineering standards.

• Create reusable security patterns, reference architectures, tools, guidance, training, communities of practice, and security-champion initiatives.

• Track emerging threats, technologies, regulations, standards, and customer needs, translating them into priorities, roadmaps, and investment strategies.

• Represent Product Security in discussions with executives, customers, researchers, suppliers, government entities, and strategic partners.

⛳️ Requirements

• Bachelor’s degree in cybersecurity, information technology, computer science, engineering, risk management, business, or a related field.

• A minimum of 10 years of progressive experience in product security within global organizations.

• Proven experience in establishing, leading, and scaling product security programs across complex global technology portfolios and diverse development teams.

• Experience in creating and managing a coordinated vulnerability disclosure and Product Security Incident Response Team (PSIRT) or product vulnerability-response program.

• Extensive background in secure product development, security architecture, threat modeling, vulnerability management, security testing, and software supply-chain security.

• Experience in developing enterprise-level product security standards, policies, engineering requirements, governance mechanisms, training, and metrics.

• Proven track record of working directly with engineering and product-development teams in regulated, safety-critical, or mission-critical environments.

• Ability to influence senior technical and business leaders across organizational boundaries.

• Strong communication skills to convey complex technical and product risks to executive, engineering, customer, and external audiences.

• Willingness to travel 10–20% both domestically and internationally.

• Experience across various industries, especially in medical devices, automotive, telecommunications, or defense (preferred).

• Familiarity with embedded systems, firmware, hardware security, and industrial or connected products (preferred).

• Knowledge of FDA pre- and post-market guidance, EU MDR, EU Cyber Resilience Act, NIST Secure Software Development Framework, and coordinated vulnerability disclosure (preferred).

🏝️ Benefits

• Variable pay, provided as a monetary bonus or in another format.

• Medical insurance.

• Dental insurance.

• Vision insurance.

• Flexible spending accounts.

• Health savings accounts.

• Life insurance.

• Accidental death and dismemberment (ADD) insurance.

• Disability insurance.

• Retirement benefits.

• Paid vacation/time off.

• Educational assistance.

• Potential inclusion of infertility assistance.

• Possible paid parental leave.

• Potential adoption assistance.

• Flexible work environment.