Senior Director, HPS Cyber Security & Compliance

Celestica International LP • San Jose, CA

20h • Onsite

About The Position

Celestica is seeking a Senior Director, HPS Cyber Security & Compliance to serve as chief security architect and governance authority for its dedicated Product & Engineering IT organization. The division supports more than 2,500 global R&D, hardware, software, and AI engineers and is scaling across advanced hardware, networking, and AI technologies. The role focuses on embedding robust, automated security controls into developer workflows while enabling fast engineering delivery and maintaining enterprise security and regulatory compliance.

Working closely with the VP of Engineering IT, the global CISO, and executive compliance leadership, the position has operational accountability for product and firmware security, perimeter defense, zero-trust architectures, Third-Party Risk Management (TPRM), and IT SOX compliance across North American and Asian design hubs. It is a highly visible executive role and is described as a potential succession pathway to corporate CISO leadership.

The role leads a global, multidisciplinary security and compliance organization, including managers and specialists in IT security, IT GRC compliance, product security, TPRM, and SOX. It works with the enterprise SOC and managed security service providers (MSSPs) on threat monitoring and incident response, and oversees security across internal infrastructure and vendor ecosystems. The position is based in an office environment; duties may involve extended sitting, sustained visual concentration, and frequent repetitive computer-related movements.

Requirements

• 12+ years of progressive leadership in information security, product security, or IT risk management within fast-scaling technology, hardware, semiconductor, or cloud organizations.
• A track record in high-velocity technology environments or global hardware/software enterprises, delivering security in a way that enables engineering speed and organizational scale.
• Executive presence and technical depth to partner with executive stakeholders, principal security architects, and external audit authorities.
• Deep experience with software supply-chain security, code-signing pipelines, HSMs, application security, and developer-centric endpoint allowlisting such as ThreatLocker.
• Strong architectural fluency in network segmentation, firewalls, zero-trust jump hosts, container security, and AWS/GCP cloud security frameworks.
• Comprehensive knowledge of IT SOX compliance, TPRM frameworks, clean room isolation, export controls including ITAR and dual-use controls, and global ISO/NIST standards.
• Proactive, solution-oriented leadership approach to meeting engineering objectives safely.
• Ability to author global security strategies and engage hands-on with principal engineers on security architecture.

Responsibilities

• Architect and enforce developer-centric security models, including zero-trust access, ThreatLocker allowlisting, and automated policy enforcement.
• Serve as the primary security authority for engineering division leaders and partner with the corporate CISO to align strategy and evaluate architectural trade-offs.
• Maintain alignment with global CISO and IT compliance leadership to address corporate controls, SOX requirements, and international audit standards.
• Lead independent security reviews across hardware, firmware, and software product lines.
• Establish secure supply-chain custody, code-signing infrastructures, and Hardware Security Modules (HSMs).
• Oversee R&D lab and perimeter defenses, including firewalls, continuous vulnerability scanning, and isolated lab network segmentation across design centers in North America and Asia.
• Define security architectures and sandboxes for applied AI engineering initiatives and hybrid cloud build environments using AWS and GCP.
• Lead a global, multidisciplinary security and compliance organization.
• Oversee TPRM programs, clean room compliance, export controls, and IT SOX controls across internal HPS infrastructure and vendor ecosystems.
• Partner with the enterprise SOC and MSSP providers on continuous threat monitoring, incident response escalation, and blast-radius containment.
• Develop global security strategies while working directly with principal engineers on zero-trust topologies.

Benefits

• High-impact ownership of security and compliance for a dedicated engineering IT organization.
• Potential C-suite succession path as a strategic successor candidate to the corporate CISO and global IT compliance leadership.
• Opportunity to drive security architecture in a fast-moving engineering environment backed by the scale of a global industry leader.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed