Global Product Security Lead - Embedded & Cloud

CNH; Oak Brook (IL); Ibrido; USD 120.000 - 184.000; Tempo pieno

Descrizione del lavoro

CNH Industrial Group in Oak Brook, IL seeks a hands-on Product Security Leader to build and guide a team securing embedded software on tractors and devices, and the cloud platform powering digital services.

You will own the security strategy, budget, and compliance posture across markets, aligning with regulators, dealers, and customers while driving secure SDLC practices across multiple product lines.

Competenze

• Bachelor's degree in Engineering, Computer Science, Cybersecurity, or related technical field (or equivalent experience).
• 8+ years of experience as a security practitioner, with experience in application, product, or embedded security.
• 3+ years of direct people leadership experience managing engineers, including hiring, coaching, performance management, and career development.
• Experience owning or co-owning an operating budget. Including annual planning, headcount forecasting, and tooling or vendor spend.
• Prior experience as a software engineer writing and shipping production code.
• Working understanding of both embedded software development and cloud software development, and the ability to reason about security across that full stack.
• Experience building and running compliance programs across multiple countries or regions, including translating differing regulatory requirements into a single maintainable process.
• Familiarity with common web and cloud security frameworks and practices, including the OWASP Top 10 and secure API design.
• Experience with build systems and CI/CD platforms (Jenkins, GitLab CI, GitHub Actions, Azure DevOps, or equivalent) and with integrating security tooling into automated pipelines.
• Experience with vulnerability management at scale: intake, triage, risk scoring (CVSS or similar), prioritization, and driving remediation across teams that do not report to you.

Mansioni

• Lead, grow, and develop a product security team spanning both cloud security and embedded/vehicle security; hire, coach, set objectives, and manage performance and career development
• Oversee regional or functional security posture, maturity, and performance
• Actively grow and manage security education and enablement within product teams. Secure coding training, secure design guidance, security champions programs, and self-service tooling that makes the secure path the easy path
• Drive security incident response preparedness and lead major investigations
• Own the product security operating budget: annual planning, headcount forecasting, tooling and licensing spend, external services (penetration testing, assessments, certification), and training
• Manage security vendors, contracts, and service delivery expectations
• Collaborate with IT, operations, and risk teams to ensure alignment of controls
• Support internal/external audits and regulatory readiness (NIST, ISO, etc.)
• Own the product security strategy and roadmap for connected vehicle and cloud platforms
• Manage multiple concurrent projects and programs across several product lines and release cadences; balance security commitments against engineering delivery timelines and elevate trade-offs clearly
• Define and drive security requirements into the SDLC and CI/CD toolchain: SAST, SCA and dependency scanning, secrets detection, container and image scanning, SBOM generation and artifact signing
• Establish security requirements for the embedded platform, including secure boot, secure and OTA update, key and certificate management, hardware root of trust, debug port and diagnostic access control, and in-vehicle network segmentation.

Conoscenze

Team leadership

Cloud security

Embedded security

Budget management

Regulatory compliance

Secure SDLC

CI/CD tooling

Vulnerability management

Formazione

Bachelor's degree in Engineering or related field

Strumenti

Jenkins

GitHub Actions

Azure DevOps

Yocto

Descrizione del lavoro

CNH Industrial Group in Oak Brook, IL seeks a hands-on Product Security Leader to build and guide a team securing embedded software on tractors and devices, and the cloud platform powering digital services.

You will own the security strategy, budget, and compliance posture across markets, aligning with regulators, dealers, and customers while driving secure SDLC practices across multiple product lines.