Director, Product Security

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Director, Product Security based in the United States.

We are seeking an accomplished Director, Product Security to define and lead global cybersecurity strategies across a diverse portfolio of medical devices, connected products, and digital healthcare solutions. In this senior leadership role, you will ensure that security is integrated throughout the entire product lifecycle, from initial design and development to deployment and post-market support. You will collaborate closely with Research and Development, Quality, Regulatory Affairs, IT, and external partners to strengthen security capabilities while supporting innovation and regulatory compliance. You will oversee global teams, establish robust security governance frameworks, and manage critical cybersecurity risks to protect patients, customers, and business operations. You will also play a key role in shaping organizational security culture through leadership, awareness, and continuous improvement initiatives. This is an opportunity to influence global product security strategy and contribute to the development of safer, more reliable healthcare technologies in a highly regulated environment.

Accountabilities

Define global product security strategy: Develop and execute a comprehensive product cybersecurity strategy aligned with organizational objectives, regulatory requirements, and evolving industry standards.
Establish security governance: Create and oversee product security policies, standards, frameworks, and secure development lifecycle practices across hardware, software, digital products, and connected medical devices.
Integrate cybersecurity throughout the product lifecycle: Partner with Research and Development, Quality, Regulatory Affairs, and IT teams to embed cybersecurity risk management into product design, development, deployment, and post-market activities.
Lead global security operations: Manage and develop global teams and external partners responsible for delivering product security services, technical capabilities, tools, and operational support at scale.
Oversee vulnerability and threat management: Direct vulnerability management programs, threat modeling, penetration testing, security assessments, and incident response activities related to product security.
Ensure regulatory compliance: Drive compliance with applicable international cybersecurity regulations, medical device requirements, industry standards, and regulatory guidance, including FDA requirements and ISO and IEC standards.
Manage cybersecurity risks: Identify, assess, prioritize, and mitigate product security risks while ensuring appropriate protection for patients, customers, connected systems, and business operations.
Provide executive-level reporting: Deliver strategic insights, performance indicators, risk assessments, and updates on cybersecurity trends and product security initiatives to senior leadership.
Build a strong security culture: Develop and promote security awareness, training programs, and organizational initiatives that strengthen cybersecurity knowledge and accountability across teams.
Drive continuous improvement: Evaluate existing security processes, identify capability gaps, and implement scalable improvements to strengthen product security maturity and operational effectiveness.
Develop strategic partnerships: Build strong relationships with internal stakeholders, external service providers, and industry partners to support consistent security execution across global operations.
Requirements
Bachelor's degree in Computer Science, Engineering, Information Security, or another relevant technical discipline.
Master's degree in Cybersecurity, Engineering, or Business Administration is preferred.
10–12 years of professional experience in cybersecurity or product security leadership roles, including experience managing global responsibilities and operating within complex, matrixed organizations.
Demonstrated experience securing complex software-enabled products, connected technologies, or digital solutions, preferably within highly regulated industries.
Strong understanding of secure product development methodologies, vulnerability management, cybersecurity risk assessment, and security governance frameworks.
Proven ability to establish and implement product security strategies, policies, standards, and operational models across diverse technical environments.
Experience leading, developing, and managing high-performing global teams, including service-based operating models and external partners.
Excellent executive-level communication, presentation, and stakeholder management skills, with the ability to influence decisions and drive alignment across multiple business functions.
Strong strategic thinking, analytical reasoning, and decision-making capabilities, with the ability to translate complex cybersecurity challenges into actionable business priorities.
Ability to balance cybersecurity requirements, regulatory obligations, product innovation, and operational objectives.
Professional fluency in English; additional languages are considered an advantage.
Willingness to travel domestically and internationally up to 20%.
Preferred Qualifications and Experience:
Previous experience in medical devices, healthcare technology, life sciences, or other regulated technology environments.
Familiarity with FDA medical device cybersecurity guidance and relevant industry standards, including IEC 62304 and ISO 14971.
Experience establishing and scaling cybersecurity capabilities within shared services, global enablement, or enterprise-wide operating models.
Technical background in cloud security, embedded systems, Internet of Things (IoT) security, or connected medical technologies.
Relevant professional certifications such as CISSP, CISM, CSSLP, or equivalent cybersecurity qualifications.
Benefits
Competitive annual base salary ranging from $154,000 to $265,650, depending on experience, qualifications, and applicable market factors.
Eligibility to participate in a long-term incentive program.
Access to a consolidated retirement and pension plan.
401(k) retirement savings plan.
120 hours of annual vacation.
40 hours of annual sick leave, subject to applicable state-specific provisions.
13 paid holidays per calendar year, including floating holidays.
Up to 40 hours of Work, Personal, and Family Time annually.
Paid parental leave of up to 480 hours within one year of the birth, adoption, or foster care placement of a child.
Bereavement leave of up to 240 hours for immediate family members and 40 hours for extended family members, subject to applicable policies.
Caregiver leave of up to 80 hours within a rolling 52-week period.
32 hours of paid volunteer leave annually.
80 hours of military spouse time off annually.
Fully remote working arrangement, with multiple eligible U.S. locations.
Opportunity to lead global cybersecurity initiatives and influence enterprise-wide product security strategy.
Exposure to innovative medical technologies, connected devices, and advanced healthcare solutions.
Collaboration with international teams and senior business and technical leaders.
Opportunities for professional development, strategic leadership, and career advancement.
Inclusive working environment focused on innovation, collaboration, employee development, and meaningful contributions to healthcare.