Product Security Manager

Position Summary

Lead the strategic direction, operational guidelines, and management standards for secure product development initiatives. Implement transparent reporting mechanisms and ensure consistent application of the Secure Development Lifecycle (SDL) practices.

Responsibilities

• Lead a high-performing team of security engineers to solve complex security challenges and pioneer innovative solutions across the product development lifecycle.
• Establish and implement a governance framework that drives continuous improvement and compliance with the Rockwell Automation Secure Development Lifecycle (SDL).
• Foster strong cross-functional partnerships across business units, product security leaders, and engineering teams to embed security as a core value and drive company-wide compliance for a diverse portfolio of products.
• Leverage engineering experience to deliver scalable security solutions throughout the product development lifecycle, ensuring alignment with stakeholders and adopters.
• Collaborate with the Strategic Sourcing Organization to enhance supplier processes and continuously reduce supply chain risks.
• Develop and implement data-driven decision-making methods, creating actionable operational metrics and early indicators that manage risk exposure.
• Oversee assurance and compliance programs, ensuring alignment with company policies, global standards / regulations, and industry best practices.
• Champion a culture of shared responsibility for security by driving collaboration among development, security, and operations teams, and facilitating secure deployments at scale for complex, distributed systems.
• Leverage AI and other emerging technologies to automate, enhance, and scale security operations.

Essentials

• Bachelor's Degree or equivalent years of relevant work experience.
• Legal authorization to work in the US.

Preferred

• Typically requires 5+ years of relevant management experience.
• Experience in software and/or application development.
• Understanding of DevSecOps, cloud platform development, and security operations.
• Utilize data to enable informed decision making quickly.
• Experience in analyzing information to identify trends and diagnose problem areas.
• Demonstrates strong team building, collaboration, and conflict resolution abilities.
• Successful in achieving buy-in for ideas and exhibits a strong affinity for metrics.
• Demonstrated ability to influence senior management and set expectations for enterprise initiatives.
• Worked closely with software, firmware, hardware engineers, product quality engineers, product managers, and other engineering roles to facilitate secure processes and practices.
• Familiarity with cybersecurity standards and practices related to security development lifecycles, such as IEC 62443, NIST SSDF, BSIMM, SOC 2, CRA, NIS2.
• Security certifications (e.g., CISSP, CSSLP) from recognized organizations such as (ISC)2.

What We Offer

• Health Insurance including Medical, Dental and Vision
• 401(k)
• Paid Time off
• Parental and Caregiver Leave
• Flexible Work Schedule