Director, Product Security
New
J
JobgetherMedical devices, healthcare technology
Based in the United StatesFull-TimeDirector
Salary154,000 - 265,650 USD per year
Apply NowOpens the employer's application page
Job Details
- Languages
- Professional fluency in English
- Experience
- 10–12 years of professional experience in cybersecurity or product security leadership roles
Requirements
- Bachelor's degree in Computer Science, Engineering, Information Security, or another relevant technical discipline.
- 10–12 years of professional experience in cybersecurity or product security leadership roles.
- Experience managing global responsibilities and operating within complex, matrixed organizations.
- Demonstrated experience securing complex software-enabled products, connected technologies, or digital solutions.
- Strong understanding of secure product development methodologies, vulnerability management, cybersecurity risk assessment, and security governance frameworks.
- Experience establishing and implementing product security strategies, policies, standards, and operational models across diverse technical environments.
- Experience leading, developing, and managing global teams, service-based operating models, and external partners.
- Professional fluency in English.
- Willingness to travel domestically and internationally up to 20%.
- A master's degree in Cybersecurity, Engineering, or Business Administration is preferred.
- Medical device, healthcare technology, life sciences, or other regulated technology experience is preferred.
- Familiarity with FDA medical device cybersecurity guidance and standards including IEC 62304 and ISO 14971 is preferred.
- Cloud security, embedded systems, Internet of Things (IoT) security, or connected medical technologies experience is preferred.
- CISSP, CISM, CSSLP, or equivalent cybersecurity qualifications are preferred.
Responsibilities
- Define and execute a global product cybersecurity strategy aligned with organizational objectives, regulatory requirements, and industry standards.
- Establish product security policies, standards, frameworks, and secure development lifecycle practices across hardware, software, digital products, and connected medical devices.
- Partner with Research and Development, Quality, Regulatory Affairs, and IT to integrate cybersecurity risk management throughout the product lifecycle.
- Lead and develop global teams and external partners delivering product security services, technical capabilities, tools, and operational support.
- Direct vulnerability management, threat modeling, penetration testing, security assessments, and product security incident response.
- Drive compliance with applicable cybersecurity regulations, medical device requirements, industry standards, and regulatory guidance, including FDA requirements and ISO and IEC standards.
- Identify, assess, prioritize, and mitigate product security risks.
- Deliver strategic insights, performance indicators, risk assessments, and cybersecurity updates to senior leadership.
- Develop security awareness, training programs, and organizational initiatives.
- Evaluate security processes, address capability gaps, and implement improvements to product security maturity and operational effectiveness.
View Full Description & ApplyYou'll be redirected to the employer's site
