Director of Product Security

ASSA ABLOY • New Haven, CT

12d • Hybrid

About The Position

ASSA ABLOY is the global leader in access solutions, helping billions of people experience a more open world every day. Our software and digital solutions extend that mission by helping customers design, manage, secure, and optimize the buildings and spaces they depend on. As digital solutions become increasingly critical to our customers' operations, security, privacy, and trust are more important than ever. We are expanding our software security capabilities to ensure our products meet the evolving expectations of enterprise customers, regulatory environments, and industry best practices. This includes strengthening our approach to governance, risk management, secure product development, compliance, and operational resilience. To support this journey, we are seeking a Director of Product Security who will help define our security strategy, partner closely with engineering teams, and champion security as a core component of our product and customer experience. This leader will play a key role in advancing our commitment to delivering secure, reliable, and trusted software solutions. This position may sit in Phoenix, AZ OR Austin, TX reporting to the CTO.

Requirements

• 10+ years of experience in security, compliance, or risk roles, including experience operating at a strategic, leadership level (CISO, Director of Security, Head of Security, or equivalent).
• A proven track record leading SOC 2 Type 2 programs, familiarity with NIS2, and direct experience planning or achieving ISO 27001 certification.
• Experience building or scaling a security program across multiple products, teams, or business units, ideally in a multi-product or portfolio company.
• People leadership experience — you've hired, managed, and developed teams, including direct reports and third-party contractors, and know how to scale a team as program scope grows.
• Hands-on experience owning and expanding Vanta, or a comparable compliance automation platform, ideally administering it across multiple teams or business units.
• Technical fluency with modern cloud infrastructure, CI/CD, and application security, enough to work credibly with engineering leaders across different tech stacks.
• Experience owning enterprise security questionnaires, customer security reviews, and vendor risk assessments.
• Strong executive communication skills — you can set strategy with a VP, report status to leadership, and explain risk to a non-technical audience.
• Experience managing external relationships with auditors, pentest vendors, and outsourced security or compliance contractors.
• Comfort operates in a lean, fast-moving, multi-product environment where you're setting the strategy while staying close enough to the details to know it's working.

Responsibilities

• Set the product security strategy and a multi-year roadmap
• Report directly to the VP of Product and Platform Technology, translating executive priorities into a security and compliance program each product team can execute against.
• Drive compliance across our software solutions, including extending SOC 2, aligning with NIS2 where relevant, and building the roadmap toward ISO 27001.
• Own the compliance automation platform, driving and expanding its use across continuous control monitoring, evidence collection, and audit readiness.
• Establish a common security baseline and shared controls in cross-functional product development teams
• Lead and grow the security and compliance team as the program scales, including hiring and developing direct reports and managing third-party contractors and outsourced security resources supporting the program.
• Own security posture from end to end: policy and governance, risk assessment, vendor risk, incident response, and audit and penetration test management.
• Partner with engineering leadership to embed secure development practices, threat modeling, and vulnerability management into day-to-day work.
• Act as the executive point of contact for enterprise customer security reviews, questionnaires, and audits, and support Sales and Customer Success in closing and retaining enterprise deals.
• Report on security and compliance posture, risk, and roadmap progress to executive leadership and, as needed, to ASSA ABLOY.
• Manage relationships with auditors, pentest vendors, and outside security partners across all four product teams.

Benefits

• Bonus eligible.
• Medical, Dental, Vision along with various plan options to choose from.
• Continuous professional development opportunities and an environment that fosters internal growth and mobility.
• Competitive compensation and benefits package which includes multiple healthcare options, tuition reimbursement, and matching 401k.
• Generous holiday schedule and paid time off to refresh and recharge.
• Employee pricing on our products and discount programs for travel, entertainment, and more

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Education Level: No Education Listed