Product Security & Compliance Leader

ASSA ABLOY Global Solutions; New Haven (CT); On-site; USD 180,000 - 230,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Professional development

Competitive compensation

Generous holidays and PTO

Employee pricing

Job summary

ASSA ABLOY Global Solutions seeks a Director of Product Security to define security strategy, partner with engineering, and champion secure product development across multiple teams. This leader will drive governance, risk management, and compliance programs, including SOC 2 Type 2 and ISO 27001 initiatives.

The role reports to the CTO and may sit in Phoenix, AZ or Austin, TX, leading a growing security and compliance team while engaging with executives and enterprise customers.

Qualifications

• 10+ years in security/compliance/risk at strategic/leadership level (CISO, Director, Head of Security, etc.)
• Proven track record leading SOC 2 Type 2 and planning ISO 27001
• Experience scaling security programs across multiple products/teams

Responsibilities

• Define security strategy and multi-year product security roadmap
• Partner with engineering to embed secure development practices
• Lead compliance programs incl. SOC 2, NIS2 alignment, ISO 27001
• Own compliance automation platform and evidence collection
• Set shared security baselines and controls across product teams
• Grow the security/compliance team and manage vendors/contractors
• Manage security posture from policy to audit and testing
• Represent security in enterprise customer reviews and audits
• Report security posture and roadmap to executives

Skills

Security leadership

SOC 2 Type 2

ISO 27001

Vanta / compliance automation

Threat modeling

Secure SDLC / secure development

Vendor risk management

Executive communication

Tools

CI/CD

Cloud infrastructure

Job description

ASSA ABLOY Global Solutions seeks a Director of Product Security to define security strategy, partner with engineering, and champion secure product development across multiple teams. This leader will drive governance, risk management, and compliance programs, including SOC 2 Type 2 and ISO 27001 initiatives.

The role reports to the CTO and may sit in Phoenix, AZ or Austin, TX, leading a growing security and compliance team while engaging with executives and enterprise customers.