Senior Director, HPS Cyber Security & Compliance

Celestica • San Jose, CA

10d

About The Position

Celestica is seeking a Senior Director, HPS Cyber Security & Compliance to serve as chief security architect and governance authority for its Product & Engineering IT organization. The division supports more than 2,500 global R&D, hardware, software, and AI engineers and is expanding rapidly across advanced hardware, networking, and AI technologies. This executive role embeds automated security controls into developer pipelines so the organization can scale while protecting enterprise security and regulatory compliance.

The role holds operational accountability for product and firmware security, perimeter defense, zero-trust architectures, Third-Party Risk Management (TPRM), and IT SOX compliance across North American and Asian design hubs. The Senior Director works closely with the VP of Engineering IT, the global CISO, and executive compliance leadership, and is positioned as a potential succession candidate for corporate CISO leadership.

The position leads a multidisciplinary global security and compliance organization, including managers and specialists in IT security, IT GRC compliance, product security, TPRM, and SOX. It also partners with the enterprise SOC and MSSP providers for threat monitoring and incident response. Duties are performed in a normal office environment and may involve extended sitting, sustained visual concentration, and frequent repetitive computer-related movements.

Requirements

• 12 or more years of progressive leadership in information security, product security, or IT risk management within fast-scaling technology, hardware, semiconductor, or cloud organizations.
• Demonstrated success delivering security in high-velocity technology environments or global hardware/software enterprises while enabling engineering speed and organizational scale.
• Executive presence and technical depth to partner with executive stakeholders, principal security architects, and external audit authorities.
• Deep experience with software supply chain security, code-signing pipelines, HSMs, application security, and developer-centric endpoint allowlisting such as ThreatLocker.
• Strong architectural fluency in network segmentation, firewalls, zero-trust jump hosts, container security, and AWS/GCP cloud security frameworks.
• Comprehensive knowledge of IT SOX compliance, TPRM frameworks, clean room isolation, export controls including ITAR/dual-use, and global ISO/NIST standards.
• Ability to author global security strategies and work hands-on with principal engineers on zero-trust topologies.
• Proactive, solution-oriented approach to enabling engineering objectives safely.

Responsibilities

• Architect and enforce developer-centric security models, including zero-trust access, ThreatLocker allowlisting, and automated policy enforcement.
• Serve as the primary security authority for engineering division leaders and the corporate CISO, aligning security strategy and evaluating architectural trade-offs.
• Maintain alignment with global CISO and IT compliance leadership to ensure growth initiatives meet corporate controls, SOX requirements, and international audit standards.
• Lead independent security reviews across hardware, firmware, and software product lines.
• Establish secure supply chain custody, code-signing infrastructures, and Hardware Security Module (HSM) practices.
• Oversee perimeter firewalls, continuous vulnerability scanning, and isolated lab network segmentation across global design centers.
• Define security architectures and sandboxes for applied AI engineering initiatives and hybrid cloud build environments using AWS and GCP.
• Lead a multidisciplinary global security and compliance organization, including IT security, GRC compliance, product security, TPRM, and SOX teams.
• Oversee TPRM programs, clean room compliance, export controls, and IT SOX controls across internal HPS infrastructure and vendor ecosystems.
• Partner with enterprise SOC and MSSP providers on continuous threat monitoring, incident response escalation, and blast-radius containment.

Benefits

• High-impact ownership of security and compliance for a dedicated engineering IT organization.
• Potential succession pathway to corporate CISO leadership.
• Opportunity to drive security architecture in a fast-moving engineering environment backed by the scale of a global industry leader.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed