Senior Director, Product & AI Security

Fortive • Everett, WA

4d

About The Position

Reporting directly to the Fortive Chief Information Security Officer, the Senior Director, Product & AI Security is responsible for strategic vision and operational oversight of Product Security and Artificial Intelligence Security across the enterprise. The role develops and executes a comprehensive security strategy that embeds secure-by-design principles into software, connected products, firmware, and AI-enabled capabilities.

The position partners across operating companies, engineering, product management, R&D, legal, and compliance to integrate product security, AI security, and secure-by-design controls throughout the product lifecycle. It defines enterprise standards, drives measurable risk reduction, and aligns security controls with business objectives, regulatory expectations, and customer commitments. The leader also coaches and develops a high-performing team of product and AI security professionals operating across Fortive and its operating companies.

The team includes employees, contractors, and third-party security partners supporting product security engineering, AI security engineering, secure development lifecycle, and vulnerability management.

Requirements

• At least 8 years of executive leadership experience in product security, application security, or AI security.
• At least 12 years of progressive experience in enterprise information security, software engineering security, or related risk management roles within a large global enterprise.
• Deep expertise in secure software development, cloud-native architectures, DevSecOps, API security, and modern application security practices.
• Experience building AI security programs, including model and AI supply-chain risk management, and contributing to cross-functional AI governance within product environments.
• Demonstrated ability to lead security transformation in environments experiencing organic growth and acquisitions.
• Experience collaborating with engineering, product management, legal, privacy, and compliance teams to translate security requirements into scalable, practical controls.
• Strong understanding of global product security and AI regulations, including the EU Cyber Resilience Act and the EU AI Act; secure coding practices; threat modeling; identity and access management; vulnerability management; and incident response.

Nice To Haves

• Industry-recognized certifications such as CISSP, CISM, or equivalent.

Responsibilities

• Develop and implement an enterprise product and AI security strategy aligned with business objectives, growth initiatives, and regulatory requirements.
• Establish enterprise standards for secure software development, AI model security, data protection, and product security risk management.
• Embed security and AI security controls throughout the product lifecycle, including requirements, architecture, design, development, testing, deployment, and sustainment.
• Drive adoption of threat modeling, secure coding standards, code scanning, software bills of materials, and vulnerability remediation processes.
• Own the AI security program, including threat modeling, adversarial and red-team testing, defenses against prompt injection, model exfiltration and data leakage, AI supply-chain and third-party/foundation-model risk, shadow AI management, AI-assisted code-generation security, intellectual-property protection, and secure agentic AI use.
• Provide risk-tiered security reviews and recommendations for AI use cases and models, and represent Security in an advisory capacity on the AI Governance Committee.
• Define and maintain reference architectures and blueprints for secure software, connected devices, cloud-native platforms, and AI-enabled solutions.
• Partner with sales, customer success, and legal on customer security reviews, contract requirements, and regulatory obligations, including alignment with global standards and emerging product security and AI regulations.
• Oversee product vulnerability management, coordinated disclosure, penetration testing, and remediation programs, including coordinating external penetration-testing vendors and assessors.
• Ensure rapid response and transparent communication for product security incidents.
• Own product software supply-chain integrity, including code signing, build and release integrity, third-party and open-source component risk, and protection of intellectual property from exfiltration or malicious code insertion.
• Ensure product and AI security capabilities can scale and integrate acquired technologies while maintaining consistent enterprise standards.
• Automate and improve product security operations to reduce manual effort and cycle times for vulnerability management, security reviews, and reporting while scaling coverage across operating companies.
• Establish measurable operating-company-level product and AI security metrics, report risk and program effectiveness to executive leadership and the Board, drive accountability, and continuously improve the program.
• Partner with AI enablement, governance, risk and compliance, legal, and privacy functions to maintain clear decision rights and consistent engagement with operating companies.
• Lead, coach, mentor, and develop product and AI security professionals.

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Education Level: No Education Listed