Director of Product Security

# Director of Product SecurityASSA ABLOY is the global leader in access solutions, helping billions of people experience a more open world every day. Our software and digital solutions extend that mission by helping customers design, manage, secure, and optimize the buildings and spaces they depend on.

As digital solutions become increasingly critical to our customers' operations, security, privacy, and trust are more important than ever.

We are expanding our software security capabilities to ensure our products meet the evolving expectations of enterprise customers, regulatory environments, and industry best practices. This includes strengthening our approach to governance, risk management, secure product development, compliance, and operational resilience.

To support this journey, we are seeking a
** Director of Product Security
** who will help define our security strategy, partner closely with engineering teams, and champion security as a core component of our product and customer experience. This leader will play a key role in advancing our commitment to delivering secure, reliable, and trusted software solutions.

This position may sit in
** Phoenix, AZ OR Austin, TX
** reporting to the CTO.
** What you will be doing:
*** Set the product security strategy and a multi-year roadmap
* Report directly to the VP of Product and Platform Technology, translating executive priorities into a security and compliance program each product team can execute against.
* Drive compliance across our software solutions, including extending SOC 2, aligning with NIS2 where relevant, and building the roadmap toward ISO 27001.
* Own the compliance automation platform, driving and expanding its use across continuous control monitoring, evidence collection, and audit readiness.
* Establish a common security baseline and shared controls in cross-functional product development teams
* Lead and grow the security and compliance team as the program scales, including hiring and developing direct reports and managing third-party contractors and outsourced security resources supporting the program.
* Own security posture from end to end: policy and governance, risk assessment, vendor risk, incident response, and audit and penetration test management.
* Partner with   engineering leadership to embed secure development practices, threat modeling, and vulnerability management into day-to-day work.
* Act as the executive point of contact for enterprise customer security reviews, questionnaires, and audits, and support Sales and Customer Success in closing and retaining enterprise deals.
* Report on security and compliance posture, risk, and roadmap progress to executive leadership and, as needed, to ASSA ABLOY.
* Manage relationships with auditors, pentest vendors, and outside security partners across all four product teams.
** What we are looking for
*** 10+ years of experience in security, compliance, or risk roles, including experience operating at a strategic, leadership level (CISO, Director of Security, Head of Security, or equivalent).
* A proven track record leading SOC 2 Type 2 programs, familiarity with NIS2, and direct experience planning or achieving ISO 27001 certification.
* Experience building or scaling a security program across multiple products, teams, or business units, ideally in a multi-product or portfolio company.
* People leadership experience — you've hired, managed, and developed teams, including direct reports and third-party contractors, and know how to scale a team as program scope grows.
* Hands-on experience owning and expanding Vanta, or a comparable compliance automation platform, ideally administering it across multiple teams or business units.
* Technical fluency with modern cloud infrastructure, CI/CD,…