Senior Director, Information Security Operations and Product Management

About the role

The Senior Director, Information Security Operations and Product Management is responsible for shaping and managing the organization’s security product strategy while ensuring robust protection of critical systems, applications, and data. This role combines cybersecurity expertise, product management, and operational leadership to deliver secure, scalable solutions aligned with business objectives.

Responsibilities

• Define and maintain a multi-year security product roadmap aligned with emerging cybersecurity threats, technology trends, regulatory requirements, and organizational goals.
• Lead the lifecycle management of security products and services, including identity platforms, threat intelligence solutions, endpoint protection, firewalls, and other security capabilities.
• Drive secure-by-design practices across software development, applications, cloud environments, and emerging AI-powered solutions.
• Partner with engineering, infrastructure, operations, privacy, legal, compliance, and business teams to ensure security requirements are integrated effectively.
• Establish governance frameworks, security controls, and operational processes that support regulatory compliance and enterprise risk management.
• Evaluate and integrate AI capabilities and automation technologies to enhance threat detection, response, and defensive security operations.
• Manage financial planning and budget oversight for security products, services, vendors, and staffing investments.
• Oversee vendor relationships, assess security performance, negotiate agreements, and ensure suppliers align with organizational security objectives.
• Lead, coach, and develop security product leaders and engineers while establishing performance goals and driving team success.
• Communicate security strategies, risks, priorities, and recommendations effectively to executive leadership and key stakeholders.

Requirements

• Bachelor’s degree in cybersecurity, information technology, or a related field, or equivalent professional experience.
• 10+ years of experience in information security, including at least 7 years managing and leading security teams or functions.
• Strong understanding of cybersecurity principles, encryption, data protection, identity management, threat landscapes, and security operations.
• Hands-on experience with security technologies, governance frameworks, and enterprise security practices.
• Experience managing relationships with infrastructure, engineering, business teams, and external technology partners.
• Proven ability to manage vendors, review contracts, negotiate terms, and optimize security investments.
• Experience managing budgets and evaluating financial impacts related to security products and services.
• Familiarity with Governance, Risk, and Compliance (GRC) platforms such as Archer is preferred.
• Knowledge of regulatory frameworks and industry standards such as HIPAA, ISO 27001/27002, PCI, and NIST.
• Certifications such as CISSP, CISM, or GIAC credentials are preferred.
• Strong leadership, collaboration, conflict management, and team-building skills.
• Excellent written and verbal communication skills, with the ability to present complex security concepts to technical teams and senior executives.
• Ability to prioritize effectively and deliver results in a fast-paced, high-pressure environment.

Benefits

A competitive compensation package based on experience and qualifications, remote work flexibility within the United States, opportunity to lead enterprise-wide cybersecurity initiatives with significant business impact, leadership role with the ability to build and develop high-performing security teams, collaboration with cross-functional teams across technology, compliance, privacy, and business operations, professional growth opportunities in a rapidly evolving security and technology environment, supportive workplace culture focused on innovation, inclusion, and continuous improvement, and limited travel requirements based on business needs.