Senior Director, Information Security

About the Role

Ampere is seeking a Senior Director of Information Security to lead our information security function. This leader will define and execute Ampere’s security strategy, bridge IT and Info Sec, mature the security operating model, and protect Ampere’s most critical assets. The position is strategic, with visibility to the executive team and all parts of the business. Core responsibilities include standardizing security strategy and architecture, improving governance, evaluating tooling, strengthening operational processes, and leading external security partnerships as required.

Strategic Governance & Security Architecture

• Develop and execute Ampere’s enterprise information security strategy and roadmap.
• Maintain robust reporting for security initiatives using meaningful security metrics, risk indicators, maturity measures, and remediation tracking.
• Balance strategic company goals with key security initiatives, ensuring security enables the business while reducing material risk.
• Review, update, and enforce enterprise security policies and standards across endpoints, network, cloud, SaaS, and on‑prem environments.
• Standardize Ampere’s security architecture and operating model across all business environments.
• Represent the security function to company leadership, auditors, customers, and external partners as needed.

Security Operations & Vendor Management

• Lead Ampere’s security operations strategy, including monitoring, detection, escalation, response, and continuous improvement.
• Lead the strategic relationship with external vendors, including ongoing performance management and service improvements.
• Serve as the primary leader and escalation point for critical cybersecurity incidents.
• Mature all aspects of the Info Sec system, including policies, tools, and operating model.
• Standardize data collection, monitoring, and alerting across endpoints, servers, identity systems, networks, cloud platforms, SaaS applications, and data centers.
• Ensure security tooling is in place to support the continuous challenges of operational security.
• Advise and utilize critical data and AI capabilities to aid in operations as required.

Cross‑Functional Leadership & IT Alignment

• Bridge the gap between Security and IT Operations through shared processes, metrics, ownership, and operating rhythms.
• Develop and manage Info Sec workflows across infrastructure, endpoints, cloud, and critical applications.
• Ensure operational audits are tied to actionable improvement plans.
• Partner with IT, Infrastructure, Engineering, and business teams to improve security while supporting business goals.
• Foster a culture of shared responsibility and collaborative risk management across the company.

Product, Infrastructure & IP Protection

• Develop and implement a security roadmap to protect Ampere’s core semiconductor assets and IP.
• Support, interpret, and develop policies and audit practices across all IT and related efforts.
• Advise product, firmware, platform, and engineering teams on security best practices where needed.
• Support compliance, customer assurance, and third‑party security activities related to critical vendors, EDA partners, cloud providers, foundry ecosystem partners, and managed security providers.
• Develop and evolve critical AI security metrics, policies, and reporting.

• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related technical field with 15+ years (Bachelor) or 12+ years (Master) of progressive experience in info‑security, cybersecurity, security operations, security architecture, infrastructure security, or risk management.
• 5+ years in a senior leadership role managing Info Sec, Sec Ops, architecture, engineering, or governance teams, with a proven record of driving results while growing team capability.
• Experienced in using modern technologies and improving infrastructure to keep pace in a fast‑paced, complex, shifting environment.
• Experience rolling out unified security platforms or operating models.
• Strong experience selecting, onboarding, and managing external partners.
• Strong understanding of modern security capabilities, including EDR/XDR, identity security, cloud…