Director of Product Security

ASSA ABLOY•New Haven, CT

13d•Hybrid

About The Position

ASSA ABLOY is seeking a Director of Product Security to help define their security strategy, partner with engineering teams, and champion security as a core component of their product and customer experience. This role is crucial in advancing the company's commitment to delivering secure, reliable, and trusted software solutions, especially as digital solutions become increasingly critical. The company is expanding its software security capabilities to meet evolving customer, regulatory, and industry expectations, focusing on governance, risk management, secure product development, compliance, and operational resilience. This position reports to the CTO and can be located in Phoenix, AZ or Austin, TX.

Requirements

10+ years of experience in security, compliance, or risk roles, including strategic leadership experience (CISO, Director of Security, Head of Security, or equivalent).
Proven track record leading SOC 2 Type 2 programs.
Familiarity with NIS2.
Direct experience planning or achieving ISO 27001 certification.
Experience building or scaling a security program across multiple products, teams, or business units, ideally in a multi-product or portfolio company.
People leadership experience: hiring, managing, and developing teams, including direct reports and third-party contractors, and scaling a team as program scope grows.
Hands-on experience owning and expanding Vanta, or a comparable compliance automation platform, ideally administering it across multiple teams or business units.
Technical fluency with modern cloud infrastructure, CI/CD, and application security, sufficient to work credibly with engineering leaders across different tech stacks.
Experience owning enterprise security questionnaires, customer security reviews, and vendor risk assessments.
Strong executive communication skills: ability to set strategy with a VP, report status to leadership, and explain risk to a non-technical audience.
Experience managing external relationships with auditors, pentest vendors, and outsourced security or compliance contractors.
Comfort operating in a lean, fast-moving, multi-product environment where strategy is set while staying close enough to the details to ensure effectiveness.

Responsibilities

Set the product security strategy and a multi-year roadmap.
Report directly to the VP of Product and Platform Technology, translating executive priorities into a security and compliance program for product teams.
Drive compliance across software solutions, including extending SOC 2, aligning with NIS2, and building a roadmap toward ISO 27001.
Own the compliance automation platform, driving its use for continuous control monitoring, evidence collection, and audit readiness.
Establish a common security baseline and shared controls in cross-functional product development teams.
Lead and grow the security and compliance team, including hiring, developing direct reports, and managing third-party contractors and outsourced security resources.
Own security posture end to end: policy and governance, risk assessment, vendor risk, incident response, and audit and penetration test management.
Partner with engineering leadership to embed secure development practices, threat modeling, and vulnerability management.
Act as the executive point of contact for enterprise customer security reviews, questionnaires, and audits, supporting Sales and Customer Success.
Report on security and compliance posture, risk, and roadmap progress to executive leadership and ASSA ABLOY.
Manage relationships with auditors, pentest vendors, and outside security partners across all four product teams.