Cybersecurity Director

Salary: $184000 - 368000 per year Requirements: We require a bachelors degree in computer science, engineering, or a related discipline, or equivalent hands-on experience. We need 15+ years of experience in cybersecurity, product security, or security engineering, including at least 5 years leading managers and/or globally distributed teams. We seek proven experience creating and scaling security programs, including organizational design, recruiting, tooling strategy, and culture building. We require a strong background in secure software development for cloud and mobile products, including secure SDLC, threat modeling, application security testing, and dependency risk management. We need experience securing cloud-native environments such as AWS, Azure, or GCP, with knowledge of IAM, network protection, logging and monitoring, secrets management, and infrastructure-as-code security. We require experience leading vulnerability management and coordinating remediation across engineering teams with defined SLAs and validation processes. We expect demonstrated incident response leadership, including playbook development, tabletop exercises, and post-incident corrective actions. We require experience partnering with governance and compliance teams on risk assessments, exceptions, third-party risk, and audit preparedness in regulated settings. We need strong executive communication skills with the ability to translate technical risk into business impact and influence decisions across regions and cultures. We value the ability to lead through influence in a fast-moving, cross-functional consumer technology or digital health environment. Preferred: experience leading security teams across the U.S., Europe, and Asia with cross-cultural and distributed leadership sensitivity. Preferred: experience in regulated industries such as medical devices, digital health, or life sciences, including familiarity with relevant standards and cybersecurity expectations. Preferred: experience securing IoT or biosensor data platforms, including telemetry integrity, device-to-cloud security patterns, and high-volume data pipelines. Preferred: background in privacy engineering and data protection for PII/PHI, including DPIAs, data minimization, and cross-border data considerations. Preferred: experience with security assurance for AI/ML systems, including misuse scenarios and secure model deployment practices. Preferred: relevant certifications such as CISSP, CISM, CCSP, or GIAC, or equivalent demonstrated expertise. Responsibilities: We will rely on you to define and drive a global security strategy that protects products and data without slowing innovation or delivery. You will build and lead a high-performing, globally distributed security organization across the U.S., Spain, and India, including team structure, hiring, operating model, and budget oversight. You will strengthen security culture across the organization through clear standards, enablement, and close partnership with engineering leaders. You will define and communicate security metrics aligned to business priorities, such as vulnerability SLAs, threat modeling coverage, test automation, and incident readiness. You will own security policies, standards, and reference architectures for cloud, mobile, data pipelines, and AI/ML services. You will partner with Product and Engineering to embed security-by-design into delivery workflows, including threat modeling, secure SDLC, dependency security, secrets management, and secure configuration baselines. You will establish and mature a security framework that simplifies complexity, focuses on fundamentals, and shows measurable improvement over time. You will lead vulnerability management across applications, cloud infrastructure, and endpoints, including triage, remediation governance, and fix verification. You will plan and oversee independent assurance activities such as penetration tests, red team exercises, security code reviews, and assessments. You will build and run incident response capabilities, including on-call coverage, playbooks, tabletop exercises, and post-incident reviews. You will partner with program teams to assess supply chain risk, including third-party evaluations, SBOM/CBOM practices, and vendor reviews. You will work with Quality and compliance stakeholders to ensure security requirements are embedded into business processes and the product lifecycle. You will collaborate with Regulatory Affairs, Quality, and Legal to translate privacy and regulatory obligations into practical controls. You will perform internal assessments and deliver training to improve security and compliance across the product portfolio and development teams. You will report regularly to senior leadership on threats, key risks, tactical controls, and the strategic roadmap. You will develop security awareness training for all employees and support ongoing technical training and certifications for security staff. You will recruit acti