Product Security Manager

CNH; Tempe (AZ); On-site; USD 120,000 - 184,000; Full time

Job summary

CNH Industrial seeks a hands-on security leader to guide our product security team for embedded software on tractors and machinery, and the cloud platform that supports digital services. You will own the security strategy, invest in a growing team, and ensure global compliance across markets.

You will drive secure coding practices, manage budgets, oversee incidents, and coordinate with IT, risk, and operations to align controls with our broader enterprise security program.

Qualifications

• Bachelor's degree in Engineering, Computer Science, Cybersecurity, or related field (or equivalent experience)
• 8+ years as a security practitioner in application, product, or embedded security
• 3+ years leading engineers including hiring and performance management
• Experience owning or co-owning an operating budget (planning, headcount, tooling)
• Prior experience as a software engineer writing and shipping production code
• Understanding of embedded and cloud software security across full stack
• Experience building cross-country compliance programs
• Familiarity with OWASP Top 10 and secure API design
• Experience with CI/CD tooling and securing pipelines
• Experience with vulnerability intake, triage, risk scoring, and remediation across teams

Responsibilities

• Lead and grow product security teams across cloud and embedded security
• Oversee regional security posture, maturity, and performance
• Drive security education and enablement within product teams
• Lead security incident response and major investigations
• Own product security budget, planning, tooling, and external services
• Manage security vendors, contracts, and service delivery
• Collaborate with IT, operations, and risk for controls alignment
• Support audits and regulatory readiness (NIST, ISO)
• Own product security strategy and roadmap for connected platforms
• Balance security commitments with engineering timelines and communicate trade-offs
• Define security requirements into SDLC and CI/CD tooling (SAST, SCA, secrets, SBOM)
• Establish secure boot, OTA updates, key/cert management, hardware root of trust

Skills

Security leadership

Cloud security

Embedded security

Budget management

Regulatory compliance

Secure SDLC

Vulnerability management

Cross-functional collaboration

Incident response

Security training

Education

Bachelor's degree in Engineering, Computer Science, Cybersecurity

Tools

Jenkins

GitLab CI

GitHub Actions

Azure DevOps

NIST/ISO compliance frameworks

Job description

About Us

Innovation. Sustainability. Productivity. This is how we are Breaking New Ground in our mission to sustainably advance the noble work of farmers and builders everywhere. With a growing global population and increased demands on resources, our products are instrumental to feeding and sheltering the world.

From developing products that run on alternative power to productivity-enhancing precision tech, we are delivering solutions that benefit people – and they are possible thanks to people like you. If the opportunity to build your skills as part of a collaborative, global team excites you, you’re in the right place.

Grow a Career. Build a Future!

Be part of this company at the forefront of agriculture and construction, that passionately innovates to drive customer efficiency and success. And we know innovation can’t happen without collaboration. So, everything we do at CNH Industrial is about reaching new heights as one team, always delivering for the good of our customers.

Job Purpose

You will lead CNH's product security team, with responsibility for securing the embedded software running on connected tractors, sprayers, combines and harvesters as well as the cloud platform and digital services those machines depend on. This is a hands‑on technical leadership role with full ownership of the function: you will build and grow a team of cloud and embedded security engineers, own the product security budget and investment roadmap, set security strategy for the product portfolio, and own the global compliance posture that allows CNH products to ship into every market we serve.

Agricultural and construction equipment is now software-defined, connected, and increasingly autonomous — and regulators, dealers, and customers all expect it to be secure. You will be the person accountable for making that true, from the secure boot chain on an ECU through to the APIs and data pipelines that make up CNH's next generation digital platform.

Key Responsibilities

• Lead, grow, and develop a product security team spanning both cloud security and embedded/vehicle security; hire, coach, set objectives, and manage performance and career development
• Oversee regional or functional security posture, maturity, and performance
• Actively grow and manage security education and enablement within product teams. Secure coding training, secure design guidance, security champions programs, and self-service tooling that makes the secure path the easy path
• Drive security incident response preparedness and lead major investigations
• Own the product security operating budget: annual planning, headcount forecasting, tooling and licensing spend, external services (penetration testing, assessments, certification), and training
• Manage security vendors, contracts, and service delivery expectations
• Collaborate with IT, operations, and risk teams to ensure alignment of controls
• Support internal/external audits and regulatory readiness (NIST, ISO, etc.)
• Own the product security strategy and roadmap for connected vehicle and cloud platforms
• Manage multiple concurrent projects and programs across several product lines and release cadences; balance security commitments against engineering delivery timelines and elevate trade-offs clearly
• Define and drive security requirements into the SDLC and CI/CD toolchain: SAST, SCA and dependency scanning, secrets detection, container and image scanning, SBOM generation and artifact signing
• Establish security requirements for the embedded platform, including secure boot, secure and OTA update, key and certificate management, hardware root of trust, debug port and diagnostic access control, and in-vehicle network segmentation.

Experience Required

• Bachelor's degree in Engineering, Computer Science, Cybersecurity, or related technical field (or equivalent experience)
• 8+ years of experience as a security practitioner, with experience in application, product, or embedded security
• 3+ years of direct people leadership experience managing engineers, including hiring, coaching, performance management, and career development
• Experience owning or co-owning an operating budget. Including annual planning, headcount forecasting, and tooling or vendor spend
• Prior experience as a software engineer writing and shipping production code
• Working understanding of both embedded software development and cloud software development, and the ability to reason about security across that full stack
• Experience building and running compliance programs across multiple countries or regions, including translating differing regulatory requirements into a single maintainable process
• Familiarity with common web and cloud security frameworks and practices, including the OWASP Top 10 and secure API design
• Experience with build systems and CI/CD platforms (Jenkins, GitLab CI, GitHub Actions, Azure DevOps, or equivalent) and with integrating security tooling into automated pipelines
• Experience with vulnerability management at scale: intake, triage, risk scoring (CVSS or similar), prioritization, and driving remediation across teams that do not report to you

Preferred Qualifications

• Experience securing connected vehicles, off-highway equipment, automotive, or other safety-relevant cyber-physical systems
• Familiarity with automotive and machinery cybersecurity standards and regulations, such as RED, EU Cyber Resilience Act, NIS2, and relevant regional data protection requirements
• Experience with functional safety concepts (ISO 25119, ISO 26262) and the interaction between safety and security
• Familiarity with cloud and information security frameworks such as ISO 27001, SOC 2, NIST CSF, NIST SSDF, or CIS Benchmarks
• Hands‑on background in one or more of: embedded C/C++, Linux/Yocto or RTOS platforms, CAN/ISOBUS or automotive Ethernet, hardware security modules, or firmware reverse engineering
• Experience with penetration testing or red teaming systems
• Experience managing a globally distributed team or working across multiple time zones
• Prior experience in agriculture, construction, telematics, or precision farming domains

Pay Transparency

The annual salary for this role is USD $120,225.00 - $184,345.00 plus any applicable bonus (Actual salaries will vary and will be based on various factors, such as skill, experience and qualification for the role.)

For roles open across multiple locations, the salary range indicated refers to the primary location. If a different location is considered, the applicable salary range will be communicated to candidates prior to the first interview.

What We Offer

At CNH, our people are at the heart of everything we do. That’s why we offer a comprehensive benefits program designed to support your health, well-being, and long-term success. From competitive compensation to flexible work arrangements and opportunities for continuous development, our benefits reflect our commitment to creating an environment where employees feel supported and empowered—both personally and professionally. We believe that when you’re given the tools to thrive, you can drive meaningful impact. At CNH, you’ll not only find the resources to succeed today—you’ll find the foundation to grow a career and build a future.

US applicants: CNH Industrial is an equal opportunity employer. This company considers candidates regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status. Applicants can learn more about their rights by viewing the federal "Know Your Rights" poster here. CNH Industrial participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S. You can view additional information here.

Canada applicants: CNH Industrial is an equal opportunity employer. This company considers candidates regardless of race, color, religion, sex, sexual orientation, gender identity, nationality, place of origin, disability, marital status, family status, age, or any other ground prohibited by applicable provincial human rights legislation.

If you need reasonable accommodation with the application process, please contact us at [e-mail].