Director, Product Security & Compliance

Record UK Ltd; Phoenix, Northern (AZ, KY); Hybrid; USD 150,000 - 210,000; Full time

Benefits offered by this job

Medical, Dental, Vision options

Tuition reimbursement

401k with matching

Paid time off

Job summary

ASSA ABLOY is seeking a Director of Product Security to define and drive our security strategy across multiple products. You will partner with engineering to embed secure development, manage governance, risk, and incident response, and lead enterprise security reviews.

You will work with executive leadership to report progress on security posture, and oversee auditors, pentest vendors, and external security partners. This role may sit in Phoenix, AZ or Austin, TX and reports to the CTO.

Qualifications

• 10+ years in security/compliance or risk at leadership level.
• SOC 2 Type 2; familiarity with ISO 27001 and NIS2.
• Experience scaling security programs across multiple products/teams.
• People leadership—hiring, mentoring, and contracting.
• Strong executive communication with non-technical audiences.

Responsibilities

• Set product security strategy and multi-year roadmap.
• Lead SOC 2 Type 2 program and automate compliance processes.
• Embed secure development practices with engineering teams.
• Own security posture across governance, risk, incidents, and audits.
• Partner with engineering leadership to implement threat modeling and vulnerability management.
• Manage security reviews, audits, and vendor risk for enterprise customers.

Skills

SOC 2 Type 2

Security leadership

Cloud infrastructure

CI/CD

Application security

Threat modeling

Tools

Vanta

Job description

ASSA ABLOY is seeking a Director of Product Security to define and drive our security strategy across multiple products. You will partner with engineering to embed secure development, manage governance, risk, and incident response, and lead enterprise security reviews.

You will work with executive leadership to report progress on security posture, and oversee auditors, pentest vendors, and external security partners. This role may sit in Phoenix, AZ or Austin, TX and reports to the CTO.