VP, Product Security & Secure-by-Design Strategy

Blue Shield of CA; Minneapolis (MN); On-site; USD 260,000 - 420,000; Full time

Job summary

Stellarus seeks an executive leader to establish and steer the enterprise product security strategy and governance, protecting products, data, and ecosystems while enabling growth.

You will drive collaboration with Product, Engineering, Risk, Privacy, Compliance, and Legal to build secure-by-design capabilities across the portfolio, including PS engineering, cloud security, and DevSecOps.

Qualifications

• Bachelor's degree in CS/Engineering or 18+ years relevant experience.
• 12+ years in information security and related fields with enterprise-scale programs.
• 7+ years leadership of managers or large security teams.
• At least one cert: CISSP, CISM, CCSP.
• Executive leadership in scaling enterprise Product Security in regulated environments.
• Deep SSDLC, DevSecOps, cloud security, API security, and software supply chain security.
• Strong knowledge of cloud platforms, microservices, containers, platform engineering.
• Experience implementing NIST CSF, NIST SSDF, ISO 27001, CIS Controls, SOC 2, OWASP.
• Proven ability to translate business strategy into security roadmaps and budgets.
• Excellent communication and stakeholder management at executive level.
• Healthcare/regulatory domain experience is a plus.

Responsibilities

• Establish and lead enterprise Product Security strategy and governance.
• Oversee product security engineering, application security, cloud security, and DevSecOps.
• Partner with Product, Engineering, Risk, Privacy, Compliance, and Legal to build secure-by-design capabilities.
• Translate business strategy into actionable security roadmaps and investments.

Skills

Bachelor's degree in CS/Engineering

18+ years of relevant experience in-lt

12+ years information security

7+ years leadership experience

CISSP/CISM/CCSP certification

Executive leadership in enterprise PS

SSDLC/DevSecOps

Cloud security

API security

Software supply chain security

Cloud platforms and microservices

NIST CSF/SSDF, ISO27001, SOC2, OWASP

Threat modeling and vulnerability mgmt

Budgeting and governance

Executive-level communication

Education

Bachelor's degree in Computer Science/Engineering

18+ years experience in lieu of degree

Job description

Stellarus seeks an executive leader to establish and steer the enterprise product security strategy and governance, protecting products, data, and ecosystems while enabling growth.

You will drive collaboration with Product, Engineering, Risk, Privacy, Compliance, and Legal to build secure-by-design capabilities across the portfolio, including PS engineering, cloud security, and DevSecOps.