Senior Director, Information Security Operations and Product Management

Position Summary:

The Senior Director, Information Security Operations and Product Management, will oversee and lead the lifecycle of products designed to provide security (e.g., antivirus, firewalls, identity management platforms, or threat intelligence tools) to the organization. Security Product Management is a specialized discipline that bridges the gap between technical security requirements, business objectives, and customer needs. Integration of security products and principles into the development of life cycles of any product or application.

This integration will include “secure-by-design" practices or software, applications, cloud environments, and AI. This position will report directly to the Chief Information Security Officer while leading a team of security product leads and engineers. This role will ensure compliance with all applicable regulations and security controls in partnership with stakeholders in IT, Privacy Legal, Sales and Clinical teams to ensure Healthmap Solutions rigorous data control standards are met.

Because security teams and product teams often operate as distinct units, the Director of Product Management must excel at building alignment and negotiating scope.

• Strategic Roadmap Ownership:
  Define and sustain a multi-year product plan aligned with emerging threat landscapes, market demands, technology innovations, and company growth objectives
• Cross-Functional Leadership:
  Collaborate with engineering, design, and operations to deliver security products and services. This collaboration is critical across the business teams, infrastructure management, and engineering teams
• Compliance Integration:
  Ensure enterprise products are designed to meet regulatory demands (e.g., Privacy, Risk, Audit) ign at scale to ensure that within development lifecycle work streams, compliance obligations are embedded within the security coding practices
• Innovation & AI:
  Integrate AI capabilities and advanced automation into defensive security tooling and threat detection
• Financial Management:
  Manage financial responsibility over the entirety of the security product roadmap inclusive of SaaS, services, and staffing
• Vendor Management:
  Monitor vendor security performance and identify areas for improvement. Work collaboratively with other functions, including Legal, Privacy, Finance and, IT and the business to ensure proper use of vendors to achieve strategic goals
• Staff Management:
  Direct and manage staff ensuring coach, development and performance management is in alignment with department goals, ensuring key performance metrics are attained and adjusting efforts to ensure target attainment
• Perform other duties as assigned

• Bachelor’s degree in cyber security (or) related degree or equivalent working experience
• 10 years’ experience in Information Security which includes 7 years’ experience managing and leading staff in at least Information Security domains
• Certified Information Security Systems Professional (CISSP), Certified Information Security Manager (CISM) or Global Information Assurance Certifications (GIAC) certifications are preferred
• Independently develop and manage the security product and services lifecycle
• Manage relationships cross functionally with Infrastructure Operations and Engineering
• Hands‑on security professional
• Experience managing non‑IT and outside supplier partner staff to achieve Security product goals and objectives
• Experience reviewing contracts and negotiating terms and conditions with the best interest of the organization
• Manage budgets and financial impacts related to security products and services
• Experience using Governance Risk and Compliance (GRC) tools such as Archer preferred
• Familiarity with regulatory controls and industry best practice frameworks such as HIPAA, ISO
  27001/2, PCI, NIST etc.)

• Technical Domain Knowledge:
  Understanding cybersecurity principles, encryption, data protection regulations, and threat landscapes
• Systems Thinking:
  Ability to anticipate the effects of security changes on identity, logging, data, and operations
• Excellent team building, leadership, and people management skills
• Strong verbal and written…