Head of Product Security & Compliance Strategy

Assa Abloy Ab; New Haven (CT); Hybrid; USD 180,000 - 260,000; Full time

Benefits offered by this job

Bonus eligible

Medical, Dental, Vision plans

Tuition reimbursement

401k with matching

Generous PTO

Employee product discounts

Job summary

ASSA ABLOY is seeking a Director of Product Security to define the security strategy across multi‑product offerings and drive the roadmap with engineering teams in the United States. This executive will own governance, risk management, compliance programs, and partner with leadership to translate priorities into action.

The role will build and scale the security and compliance function, manage auditors and vendors, and embed secure development practices while supporting enterprise customer

Qualifications

• 10+ years of experience in security, compliance, or risk at leadership level (CISO/Director or equivalent).
• Experience leading SOC 2 Type 2 programs and ISO 27001 planning or certification.
• Proven track record building or scaling a security program across multiple products/teams.

Responsibilities

• Define product security strategy and multi-year roadmap.
• Own compliance automation and evidence collection.
• Lead security & compliance team, including hiring and managing contractors.
• Embed secure development practices with engineering leadership.
• Engage in enterprise customer security reviews, audits, and questionnaires.
• Report security posture and roadmap progress to executives.

Skills

Security leadership

SOC 2 Type 2

ISO 27001

Vendor risk management

Executive communication

Threat modeling

Cloud & CI/CD

Secure SDLC

Auditor relationships

People leadership

Education

Bachelor's degree in Computer Science or equivalent

Tools

Vanta

Job description

ASSA ABLOY is seeking a Director of Product Security to define the security strategy across multi‑product offerings and drive the roadmap with engineering teams in the United States. This executive will own governance, risk management, compliance programs, and partner with leadership to translate priorities into action.

The role will build and scale the security and compliance function, manage auditors and vendors, and embed secure development practices while supporting enterprise customer