Director, Global Product Security

Koch

. Define and lead the company-wide product security strategy and governance structure across product lines and geographies .

Posted 11/11/2026full-timeRemote • United StatesLead💰 $170,000 - $195,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in establishing and leading product security strategies, frameworks, and governance structures across diverse global technology portfolios. Proficient in secure product development, vulnerability management, and translating regulatory requirements into practical engineering standards.

Highest-signal resume keywords

Product Security Strategy DevelopmentVulnerability ManagementSecure Product Development LifecycleThreat ModelingSecurity Architecture

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Product SecurityVulnerability AnalysisSecurity TestingRisk AssessmentsSoftware Supply-Chain SecuritySecurity PoliciesGovernance MechanismsSecurity ArchitectureThreat ModelingVulnerability Disclosure

Soft Skills

CommunicationInfluencing Senior LeadersCollaboration

Tools & Technologies

SBOMSoftware Composition AnalysisSecurity PatternsReference Architectures

Industry Keywords

CybersecurityMedical DevicesAutomotiveTelecommunicationsDefenseFDA GuidanceEU MDRNIST Secure Software Development Framework

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Define and lead the company-wide product security strategy and governance structure across product lines and geographies
Establish a scalable product security framework, policies, standards, engineering requirements, maturity model, metrics, and business-unit flexibility
Partner with senior engineering and business leaders to integrate security into product lifecycles and business decisions
Establish accountability between the central Product Security organization and product-development teams
Provide consulting on threat modeling, attack-surface analysis, security architecture and design reviews, risk assessments, vulnerability analysis, and security testing
Establish and improve a Secure Product Development Lifecycle with risk-based security gates, evidence requirements, exceptions, and acceptance criteria
Establish and operate a global Product Security Incident Response Team, including vulnerability intake, triage, investigation, severity and prioritization, remediation coordination, and disclosure
Mature SBOM, software composition analysis, open-source security, and software and product supply-chain security practices
Translate industry, regulatory, contractual, and customer requirements into practical engineering standards
Develop reusable security patterns, reference architectures, tools, guidance, training, communities of practice, and security-champion programs
Monitor emerging threats, technologies, regulations, standards, and customer expectations and translate them into priorities, roadmaps, and investment plans
Represent Product Security in executive, customer, researcher, supplier, government, and strategic-partner engagements

Requirements

What you’ll need

Bachelor’s degree in cybersecurity, information technology, computer science, engineering, risk management, business, or a related discipline
10 or more years of progressive experience in product security in global organizations
Experience establishing, leading and scaling product security programs across complex global technology portfolios and geographically diverse development teams
Experience establishing and operating a coordinated vulnerability disclosure and PSIRT or product vulnerability-response program
Deep experience with secure product development, security architecture, threat modeling, vulnerability management, security testing, and software supply-chain security
Experience developing enterprise product security standards, policies, engineering requirements, governance mechanisms, training and metrics
Experience working directly with engineering and product-development organizations in regulated, safety-critical, or mission-critical environments
Experience influencing senior technical and business leaders across organizational boundaries
Ability to communicate complex technical and product risk clearly to executive, engineering, customer, and external audiences
Ability to travel 10–20% domestically and internationally
Experience across multiple industries, particularly medical devices, automotive, telecommunications or networking, and defense (preferred)
Experience with embedded systems, firmware, hardware security, and industrial or connected products (preferred)
Knowledge of FDA pre- and post-market guidance, EU MDR, EU Cyber Resilience Act, NIST Secure Software Development Framework, and coordinated vulnerability disclosure (preferred)

Benefits

Comp & perks

Variable pay, issued as a monetary bonus or in another form
Medical insurance
Dental insurance
Vision insurance
Flexible spending accounts
Health savings accounts
Life insurance
Accidental death and dismemberment (ADD) insurance
Disability insurance
Retirement benefits
Paid vacation/time off
Educational assistance
May include infertility assistance
May include paid parental leave
May include adoption assistance
Flexible work environment