Director of Product Security

Strategic Leadership & Vision
Multi-Year Roadmap: Define and execute a multi-year Product Security strategy that shifts from reactive patching to proactive resilience.
Culture & Advocacy: Build a "Security Champions" program across engineering to decentralise security ownership.
Executive Stakeholder Management: Translate complex technical risks into business impact for the C-suite and Board, ensuring security is seen as a business enabler.
Technical Excellence (Shift-Left & Shield-Right)
Secure SDLC: Architect and govern the integration of SAST, DAST, and SCA tools into automated CI/CD pipelines.
Offensive Security: Lead a multi-disciplinary team in conducting VA/PT for Web, Mobile, and Network, alongside advanced Red Teaming exercises to test detection and response capabilities.
Cloud Security & CSPM: Own the security posture across AWS, Azure, or GCP using CSPM (Cloud Security Posture Management) to prevent drift and misconfigurations.
Architecture Review: Act as the final authority on security architecture reviews for all high-impact product features.
Operational & Financial Management
Metrics & KPIs: Drive accountability through rigorous tracking of KPI, SLA Compliance, and Vulnerability remediation.
Budget & Vendors: Manage the security department’s OpEx/CapEx budget, negotiate with global vendors, and optimize the security tooling stack.
Performance Management: Lead hiring, mentorship, and annual performance reviews for a global team of security engineers and researchers.

Work arrangement
No