Director of Product Security

• Set the product security strategy and a multi-year roadmap
• Report directly to the VP of Product and Platform Technology, translating executive priorities into a security and compliance program each product team can execute against.
• Drive compliance across our software solutions, including extending SOC 2, aligning with NIS2 where relevant, and building the roadmap toward ISO 27001.
• Own the compliance automation platform, driving and expanding its use across continuous control monitoring, evidence collection, and audit readiness.
• Establish a common security baseline and shared controls in cross-functional product development teams
• Lead and grow the security and compliance team as the program scales, including hiring and developing direct reports and managing third-party contractors and outsourced security resources supporting the program.
• Own security posture from end to end: policy and governance, risk assessment, vendor risk, incident response, and audit and penetration test management.
• Partner with engineering leadership to embed secure development practices, threat modeling, and vulnerability management into day-to-day work.
• Act as the executive point of contact for enterprise customer security reviews, questionnaires, and audits, and support Sales and Customer Success in closing and retaining enterprise deals.
• Report on security and compliance posture, risk, and roadmap progress to executive leadership and, as needed, to ASSA ABLOY.
• Manage relationships with auditors, pentest vendors, and outside security partners across all four product teams.

• 10 years of experience in security, compliance, or risk roles, including experience operating at a strategic, leadership level (CISO, Director of Security, Head of Security, or equivalent).
• A proven track record leading SOC 2 Type 2 programs, familiarity with NIS2, and direct experience planning or achieving ISO 27001 certification.
• Experience building or scaling a security program across multiple products, teams, or business units, ideally in a multi-product or portfolio company.
• People leadership experience — you've hired, managed, and developed teams, including direct reports and third-party contractors, and know how to scale a team as program scope grows.
• Hands-on experience owning and expanding Vanta, or a comparable compliance automation platform, ideally administering it across multiple teams or business units.
• Technical fluency with modern cloud infrastructure, CI/CD, and application security, enough to work credibly with engineering leaders across different tech stacks.
• Experience owning enterprise security questionnaires, customer security reviews, and vendor risk assessments.
• Strong executive communication skills — you can set strategy with a VP, report status to leadership, and explain risk to a non-technical audience.
• Experience managing external relationships with auditors, pentest vendors, and outsourced security or compliance contractors.
• Comfort operates in a lean, fast-moving, multi-product environment where you're setting the strategy while staying close enough to the details to know it's working.

• Bonus eligible.
• Medical, Dental, Vision along with various plan options to choose from.
• Continuous professional development opportunities and an environment that fosters internal growth and mobility.
• Competitive compensation and benefits package which includes multiple healthcare options, tuition reimbursement, and matching 401k.
• Generous holiday schedule and paid time off to refresh and recharge.
• Employee pricing on our products and discount programs for travel, entertainment, and more

We are the ASSA ABLOY Group

Our people have made us the global leader in access solutions. In return, we open doors for them wherever they go. With nearly 63,000 colleagues in more than 70 different countries, we help billions of people experience a more open world. Our innovations make all sorts of spaces – physical and virtual – safer, more secure, and easier to access.

As an employer, we value results – not titles, or backgrounds. We empower our people to build their career around their aspirations and our ambitions – supporting them with regular feedback, training, and development opportunities. Our colleagues think broadly about where they can make the most impact, and we encourage them to grow their role locally, regionally, or even internationally.

As we welcome new people on board, it’s important to us to have diverse, inclusive teams, and we value different perspectives and experiences.