Senior director, information security operations and product management

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Director, Information Security Operations and Product Management based in United States.

This leadership role is responsible for shaping and managing the organization’s security product strategy while ensuring robust protection of critical systems, applications, and data.

The position combines cybersecurity expertise, product management, and operational leadership to deliver secure, scalable solutions aligned with business objectives.

You will lead security product lifecycles, from roadmap definition and vendor management to implementation, governance, and continuous improvement.

Working closely with technology, legal, privacy, and business stakeholders, you will embed security-by-design principles across platforms, cloud environments, and AI initiatives.

This role offers the opportunity to influence enterprise security strategy while building strong teams, improving resilience, and advancing modern security capabilities.

The ideal candidate is a strategic thinker and hands-on security leader who can translate complex risks into practical solutions.

Accountabilities:

The Senior Director will oversee security operations and product management initiatives, ensuring that security solutions support organizational growth, compliance requirements, and evolving threat landscapes. This role requires strong cross-functional collaboration, strategic planning, and the ability to manage both technical initiatives and business priorities.

• Define and maintain a multi-year security product roadmap aligned with emerging cybersecurity threats, technology trends, regulatory requirements, and organizational goals.
• Lead the lifecycle management of security products and services, including identity platforms, threat intelligence solutions, endpoint protection, firewalls, and other security capabilities.
• Drive secure-by-design practices across software development, applications, cloud environments, and emerging AI-powered solutions.
• Partner with engineering, infrastructure, operations, privacy, legal, compliance, and business teams to ensure security requirements are integrated effectively.
• Establish governance frameworks, security controls, and operational processes that support regulatory compliance and enterprise risk management.
• Evaluate and integrate AI capabilities and automation technologies to enhance threat detection, response, and defensive security operations.
• Manage financial planning and budget oversight for security products, services, vendors, and staffing investments.
• Oversee vendor relationships, assess security performance, negotiate agreements, and ensure suppliers align with organizational security objectives.
• Lead, coach, and develop security product leaders and engineers while establishing performance goals and driving team success.
• Communicate security strategies, risks, priorities, and recommendations effectively to executive leadership and key stakeholders.

Requirements:

The ideal candidate brings extensive experience in cybersecurity leadership, security product management, and enterprise technology environments. They should combine technical depth with strong business acumen, communication skills, and the ability to lead teams through complex security initiatives.

• Bachelor’s degree in cybersecurity, information technology, or a related field, or equivalent professional experience.
• 10+ years of experience in information security, including at least 7 years managing and leading security teams or functions.
• Experience managing security product and service lifecycles from strategy through implementation and optimization.
• Strong understanding of cybersecurity principles, encryption, data protection, identity management, threat landscapes, and security operations.
• Hands-on experience with security technologies, governance frameworks, and enterprise security practices.
• Experience managing relationships with infrastructure, engineering, business teams, and external technology partners.
• Proven ability to manage vendors, review contracts, negotiate terms, and optimize security investments.
• Experience managing budgets and evaluating financial impacts related to security products and services.
• Familiarity with Governance, Risk, and Compliance (GRC) platforms such as Archer is preferred.
• Knowledge of regulatory frameworks and industry standards such as HIPAA, ISO 27001/27002, PCI, and NIST.
• Certifications such as CISSP, CISM, or GIAC credentials are preferred.
• Strong leadership, collaboration, conflict management, and team-building skills.
• Excellent written and verbal communication skills, with the ability to present complex security concepts to technical teams and senior executives.
• Ability to prioritize effectively and deliver results in a fast-paced, high-pressure environment.

Benefits:

Competitive compensation package based on experience and qualifications.

Remote work flexibility within the United States.

Opportunity to lead enterprise-wide cybersecurity initiatives with significant business impact.

Leadership role with the ability to build and develop high-performing security teams.

Collaboration with cross-functional teams across technology, compliance, privacy, and business operations.

Professional growth opportunities in a rapidly evolving security and technology environment.

Supportive workplace culture focused on innovation, inclusion, and continuous improvement.

Limited travel requirements based on business needs.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1