Senior Director of Product Security

E6; Milwaukee (WI); On-site; USD 180,000 - 260,000; Full time

Job summary

E6 is seeking an experienced Senior Director of Product Security to establish and lead a global Product Security program across a portfolio of connected products.

You will partner with engineering, product, legal, and leadership to embed security across the product lifecycle while enabling innovation and delivery speed.

Qualifications

• Experience leading enterprise security initiatives and technical organizations.

Responsibilities

• Define and execute enterprise Product Security strategy across connected products.
• Build and mature Secure-by-Design practices throughout SDLC.
• Lead PSIRT, vulnerability management, and SBOM initiatives.
• Translate global regulations into practical engineering processes.

Skills

Executive presence

Stakeholder influence

Security leadership

Executive communication

Job description

Our client is seeking an experienced Senior Director of Product Security to establish and lead the next generation of Product Security across a global portfolio of connected products.

This is more than a security leadership role; it's an opportunity to build a strategic capability that becomes a competitive advantage for the business. You'll partner with engineering, product management, legal, quality, and executive leadership to embed security throughout the product lifecycle while enabling innovation, accelerating product delivery, and strengthening customer trust.

The ideal leader understands that world-class product security is as much about influencing people, engineering culture, and business decisions as it is about technology. You'll shape long-term strategy, develop scalable governance, build high-performing teams, and help position security as a business enabler rather than a compliance obligation.

If you're energized by building programs, influencing executive strategy, and creating secure products at enterprise scale, we'd love to speak with you.

What You'll Own

• Define and execute the enterprise Product Security strategy across connected products, embedded software, and cyber-physical systems.
• Build and mature Secure-by-Design practices that become embedded throughout the Software Development Lifecycle (SDLC).
• Lead Product Security Incident Response (PSIRT), vulnerability management, coordinated vulnerability disclosure, and Software Bill of Materials (SBOM) initiatives.
• Drive adoption of IEC 62443 and other industry-recognized product security standards while supporting certification and regulatory readiness.
• Translate evolving cybersecurity regulations—including global product security requirements—into practical engineering processes.
• Partner with engineering leaders to integrate security into development without sacrificing product quality, customer experience, or delivery velocity.
• Build, mentor, and scale a high-performing Product Security organization while cultivating Security Champions across engineering teams.
• Communicate cybersecurity risk and business impact effectively to executive leadership, customers, auditors, regulators, and external partners.
• Develop governance frameworks, metrics, dashboards, and strategic roadmaps that demonstrate measurable business value.
• Influence broader enterprise cybersecurity strategy through executive collaboration and thought leadership.

What We're Looking For

We're seeking a leader who combines technical depth with executive presence and has successfully built or transformed Product Security organizations.

Required Experience

• 10+ years in Product Security, Cybersecurity, Secure Software Development, or related disciplines.
• 5+ years leading enterprise security initiatives and technical organizations.
• Demonstrated experience building or significantly maturing Product Security programs.
• Deep expertise in:
• Secure Software Development Lifecycle (SSDLC/SDLC)
• Product Security Incident Response (PSIRT)
• Vulnerability Management
• Experience securing connected, embedded, OT, IoT, industrial, or cyber-physical products.
• Strong executive communication skills with the ability to influence both senior leadership and highly technical engineering organizations.
• Working knowledge of global cybersecurity regulations impacting connected products.

Preferred Experience

Experience within one or more of the following industries is highly valued:

• Manufacturing
• Medical Devices
• Energy & Utilities
• Automotive
• Connected Devices / IoT

Additional experience with

• EU Cyber Resilience Act (CRA)
• Cloud-connected products
• Embedded software
• Mobile applications
• Operational Technology (OT)
• Building globally distributed Product Security teams

Professional certifications such as CISSP, CSSLP, GICSP.

What Success Looks Like

• Embedding Secure-by-Design into every phase of product development.
• Building trusted partnerships where engineering views security as an accelerator; not a gatekeeper.
• Creating scalable governance that supports both regulatory compliance and business growth.
• Establishing mature vulnerability management, PSIRT, and product security operations across the organization.
• Providing executive leadership with meaningful security metrics, business risk visibility, and strategic direction.
• Helping shape the long-term cybersecurity strategy for a growing global organization.

Why This Opportunity?

This is a rare opportunity to build something meaningful.

You’ll have executive visibility, organizational influence, and the resources to establish a modern Product Security function that directly impacts product innovation, customer trust, and enterprise strategy. Rather than inheriting a mature organization, you'll have the opportunity to define the vision, shape the roadmap, and leave a lasting impact on how security is integrated across the business.

For someone who enjoys building programs, mentoring leaders, influencing engineering culture, and connecting cybersecurity strategy with business outcomes, this role offers a unique platform to make that impact.