Chief Product Security & Strategy Officer

Blue Shield of CA; Virginia Beach (VA); On-site; USD 250,000 - 350,000; Full time

Job summary

Stellarus is seeking an executive leader to establish and drive the enterprise product security strategy across its healthcare technology products and services. You will partner with Product, Engineering, Risk, Privacy, Compliance, and Legal leaders to embed secure-by-design practices at scale and oversee security programs spanning engineering, cloud security, and governance.

You will guide a security organization focused on SSDLC, threat modeling, and risk management while building

Qualifications

• Bachelor's degree in CS, Engineering, or related field or 18+ years of relevant experience.
• 12+ years in information security or related disciplines with enterprise-scale programs.
• 7+ years of leadership experience leading managers/large teams.
• At least one certification e.g., CISSP, CISM or CCSP.
• Executive leadership in scaling enterprise Product Security programs in regulated environments.
• SSDLC, application security, DevSecOps, cloud security, API security, and software supply chain security expertise.
• Strong knowledge of cloud platforms, microservices, containers, and platform engineering.
• Experience implementing frameworks like NIST CSF, NIST SSDF, ISO 27001, CIS Controls, SOC 2, OWASP.
• Security into agile/product operating models.
• Threat modeling, vulnerability management, penetration testing, code analysis, secure architecture reviews.
• Security risks management for customer-facing products and cloud-native apps.
• Translating business strategy into security roadmaps and budgets.
• Financial and operational acumen including budgeting and investments.
• Excellent communication and stakeholder management; executive presentation skills.
• Collaboration with executives, boards, regulators, and auditors.

Responsibilities

• Lead enterprise Product Security programs across Stellarus portfolio.
• Partner with Product, Engineering, Risk, Privacy, Compliance, and Legal leaders to build secure-by-design capabilities.
• Oversee security engineering, application security, cloud security, DevSecOps, vulnerability management, security architecture, and governance programs.
• Establish security strategy, governance framework, and operating model.
• Develop leaders and build high-performing security teams.

Skills

Security leadership

SSDLC

Threat modeling

Vulnerability management

DevSecOps

Cloud security

API security

Software supply chain security

Security architecture

Executive communication

Stakeholder management

Agile security

Budget management

Education

Bachelor's degree in Computer Science, Engineering, or related field; or 18+ years experience

18+ years of relevant security leadership experience

Job description

Stellarus is seeking an executive leader to establish and drive the enterprise product security strategy across its healthcare technology products and services. You will partner with Product, Engineering, Risk, Privacy, Compliance, and Legal leaders to embed secure-by-design practices at scale and oversee security programs spanning engineering, cloud security, and governance.

You will guide a security organization focused on SSDLC, threat modeling, and risk management while building