Senior Director, Product & AI Security

Fortive•Everett, WA

About The Position

The Senior Director, Product & AI Security reports directly to Fortive’s VP & Chief Information Security Officer and is responsible for strategic vision and operational oversight for Product Security and AI Security across the enterprise. The role leads the development and execution of a comprehensive security strategy that embeds secure-by-design principles into software, connected products, firmware, and AI-enabled capabilities. It works across operating companies and teams in engineering, product management, R&D, legal, and compliance to integrate product security, AI security, and secure-by-design controls throughout the product lifecycle. The leader defines enterprise standards, drives measurable risk reduction, aligns security controls with business objectives and regulatory and customer expectations, and leads, coaches, mentors, and develops a high-performing team of product and AI security professionals. The team includes FTEs, contractors, and third-party security partners supporting product security engineering, AI security engineering, the secure development lifecycle, and vulnerability management. The role owns product and AI security strategy, secure development lifecycle controls, AI security and model risk, product security architectures, vulnerability and incident management, software supply-chain integrity, and acquisition integration. It also drives operational automation, establishes measurable operating-company-level metrics, and reports program effectiveness and risk to executive leadership and the Board. The role represents Security on the AI Governance Committee in an advisory capacity; business owners remain accountable for AI use-case decisions.

Requirements

At least 8 years of executive leadership experience in product security, application security, or AI security.
At least 12 years of progressive experience in enterprise information security, software engineering security, or related risk management roles within a large global enterprise.
Deep expertise in secure software development, cloud-native architectures, DevSecOps, API security, and modern application security practices.
Experience building AI security programs, including model and AI supply-chain risk management, and contributing to cross-functional AI governance within product environments.
Demonstrated ability to lead security transformation in environments experiencing organic growth and acquisitions.
Experience collaborating with engineering, product management, legal, privacy, and compliance teams to translate security requirements into scalable, practical controls.
Strong understanding of global product security and AI regulations, including the EU Cyber Resilience Act and EU AI Act; secure coding; threat modeling; identity and access management; vulnerability management; and incident response.

Nice To Haves

Industry-recognized certification such as CISSP, CISM, or equivalent.

Responsibilities

Develop and implement a product and AI security strategy aligned with business objectives, growth initiatives, and regulatory requirements.
Establish enterprise standards for secure software development, AI model security, data protection, and product security risk management.
Embed security and AI security controls across the product lifecycle, from requirements, architecture, and design through development, testing, deployment, and sustainment.
Drive adoption of threat modeling, secure coding standards, code scanning, software bills of materials, and vulnerability remediation processes.
Own the AI security program, including AI threat modeling and adversarial or red-team testing; protection against prompt injection, model exfiltration, and data leakage; AI supply-chain and third-party or foundation-model risk; shadow AI discovery and management; security of AI-assisted code generation; and secure use of agentic AI.
Provide risk-tiered security reviews and recommendations for AI use cases and models, and represent Security on the AI Governance Committee in an advisory capacity.
Define and maintain reference architectures and blueprints for secure software, connected devices, cloud-native platforms, and AI-enabled solutions.
Ensure scalability, resiliency, and security by design across products and customer environments.
Partner with sales, customer success, and legal teams on customer security reviews, contract requirements, and regulatory obligations.
Ensure alignment with global standards and emerging product security and AI regulations, including the EU Cyber Resilience Act and EU AI Act.
Oversee product vulnerability management, coordinated disclosure, penetration testing, and remediation programs, including coordination of external testing vendors and assessors.
Ensure rapid response and transparent communication for product security incidents.
Own product software supply-chain integrity, including code signing, build and release integrity, third-party and open-source component risk, and protection of intellectual property from exfiltration or malicious code insertion.
Ensure product and AI security capabilities can scale and integrate acquired technologies while maintaining consistent enterprise standards.
Drive automation and operational efficiency across product security, reducing manual effort and cycle times for vulnerability management, security reviews, and reporting.
Establish measurable operating-company-level product and AI security metrics and provide regular reporting to executive leadership and the Board on risk and program effectiveness.
Drive accountability and continuous improvement, partnering with AI enablement, governance, risk and compliance, legal, and privacy functions to clarify decision rights and ensure consistent engagement with operating companies.
Lead, coach, mentor, and develop a high-performing team of product and AI security professionals.