Director of Product Security

Assa Abloy Ab; New Haven (CT); Hybrid; USD 180,000 - 260,000; Full time

Benefits offered by this job

Bonus eligible

Medical, Dental, Vision plans

Tuition reimbursement

401k with matching

Generous PTO

Employee product discounts

Job summary

ASSA ABLOY is seeking a Director of Product Security to define the security strategy across multi‑product offerings and drive the roadmap with engineering teams in the United States. This executive will own governance, risk management, compliance programs, and partner with leadership to translate priorities into action.

The role will build and scale the security and compliance function, manage auditors and vendors, and embed secure development practices while supporting enterprise customer

Qualifications

• 10+ years of experience in security, compliance, or risk at leadership level (CISO/Director or equivalent).
• Experience leading SOC 2 Type 2 programs and ISO 27001 planning or certification.
• Proven track record building or scaling a security program across multiple products/teams.

Responsibilities

• Define product security strategy and multi-year roadmap.
• Own compliance automation and evidence collection.
• Lead security & compliance team, including hiring and managing contractors.
• Embed secure development practices with engineering leadership.
• Engage in enterprise customer security reviews, audits, and questionnaires.
• Report security posture and roadmap progress to executives.

Skills

Security leadership

SOC 2 Type 2

ISO 27001

Vendor risk management

Executive communication

Threat modeling

Cloud & CI/CD

Secure SDLC

Auditor relationships

People leadership

Education

Bachelor's degree in Computer Science or equivalent

Tools

Vanta

Job description

ASSA ABLOY is the global leader in access solutions, helping billions of people experience a more open world every day. Our software and digital solutions extend that mission by helping customers design, manage, secure, and optimize the buildings and spaces they depend on. As digital solutions become increasingly critical to our customers' operations, security, privacy, and trust are more important than ever. We are expanding our software security capabilities to ensure our products meet the evolving expectations of enterprise customers, regulatory environments, and industry best practices. This includes strengthening our approach to governance, risk management, secure product development, compliance, and operational resilience. To support this journey, we are seeking a Director of Product Security who will help define our security strategy, partner closely with engineering teams, and champion security as a core component of our product and customer experience. This leader will play a key role in advancing our commitment to delivering secure, reliable, and trusted software solutions. This position may sit in Phoenix, AZ OR Austin, TX reporting to the CTO.

What you will be doing:

• Set the product security strategy and a multi-year roadmap
• Report directly to the VP of Product and Platform Technology, translating executive priorities into a security and compliance program each product team can execute against.
• Drive compliance across our software solutions, including extending SOC 2, aligning with NIS2 where relevant, and building the roadmap toward ISO 27001.
• Own the compliance automation platform, driving and expanding its use across continuous control monitoring, evidence collection, and audit readiness.
• Establish a common security baseline and shared controls in cross-functional product development teams.
• Lead and grow the security and compliance team as the program scales, including hiring and developing direct reports and managing third-party contractors and outsourced security resources supporting the program.
• Own security posture from end to end: policy and governance, risk assessment, vendor risk, incident response, and audit and penetration test management.
• Partner with engineering leadership to embed secure development practices, threat modeling, and vulnerability management into day-to-day work.
• Act as the executive point of contact for enterprise customer security reviews, questionnaires, and audits, and support Sales and Customer Success in closing and retaining enterprise deals.
• Report on security and compliance posture, risk, and roadmap progress to executive leadership and, as needed, to ASSA ABLOY.
• Manage relationships with auditors, pentest vendors, and outside security partners across all four product teams.

What we are looking for

• 10+ years of experience in security, compliance, or risk roles, including experience operating at a strategic, leadership level (CISO, Director of Security, Head of Security, or equivalent).
• A proven track record leading SOC 2 Type 2 programs, familiarity with NIS2, and direct experience planning or achieving ISO 27001 certification.
• Experience building or scaling a security program across multiple products, teams, or business units, ideally in a multi-product or portfolio company.
• People leadership experience - you've hired, managed, and developed teams, including direct reports and third-party contractors, and know how to scale a team as program scope grows.
• Hands‑on experience owning and expanding Vanta, or a comparable compliance automation platform, ideally administering it across multiple teams or business units.
• Technical fluency with modern cloud infrastructure, CI/CD, and application security, enough to work credibly with engineering leaders across different tech stacks.
• Experience owning enterprise security questionnaires, customer security reviews, and vendor risk assessments.
• Strong executive communication skills - you can set strategy with a VP, report status to leadership, and explain risk to a non-technical audience.
• Experience managing external relationships with auditors, pentest vendors, and outsourced security or compliance contractors.
• Comfort operates in a lean, fast-moving, multi-product environment where you're setting the strategy while staying close enough to the details to know it's working.

What we offer

• Bonus eligible.
• Medical, Dental, Vision along with various plan options to choose from.
• Continuous professional development opportunities and an environment that fosters internal growth and mobility.
• Competitive compensation and benefits package which includes multiple healthcare options, tuition reimbursement, and matching 401k.
• Generous holiday schedule and paid time off to refresh and recharge.
• Employee pricing on our products and discount programs for travel, entertainment, and more

We are the ASSA ABLOY Group Our people have made us the global leader in access solutions. In return, we open doors for them wherever they go. With nearly 63,000 colleagues in more than 70 different countries, we help billions of people experience a more open world. Our innovations make all sorts of spaces - physical and virtual - safer, more secure, and easier to access. As an employer, we value results - not titles, or backgrounds. We empower our people to build their career around their aspirations and our ambitions - supporting them with regular feedback, training, and development opportunities. Our colleagues think broadly about where they can make the most impact, and we encourage them to grow their role locally, regionally, or even internationally. As we welcome new people on board, it’s important to us to have diverse, inclusive teams, and we value different perspectives and experiences.

We are the ASSA ABLOY Group Our people have made us the global leader in access solutions. In return, we open doors for them wherever they go. With nearly 63,000 colleagues in more than 70 different countries, we help billions of people experience a more open world. Our innovations make all sorts of spaces - physical and virtual - safer, more secure, and easier to access. As an employer, we value results - not titles, or backgrounds. We empower our people to build their career around their aspirations and our ambitions - supporting them with regular feedback, training, and development opportunities. Our colleagues think broadly about where they can make the most impact, and we encourage them to grow their role locally, regionally, or even internationally. As we welcome new people on board, it’s important to us to have diverse, inclusive teams, and we value different perspectives and experiences.