Define and execute a comprehensive product security strategy
Build, lead, and mentor a high-performing team of product security professionals
Manage and allocate human and financial resources
Drive a "shift-left" security strategy in the product lifecycle
Oversee a rigorous threat modeling program and lead cybersecurity risk assessments
Champion DevSecOps principles and automate security controls and testing
Provide architectural guidance on secure design
Ensure all required cybersecurity documentation is prepared and submitted
Manage the generation and maintenance of SBOMs and VEX documents
Act as the senior product security subject matter expert during regulatory inspections
Oversee the post-market surveillance program for emerging threats
Lead and manage the security incident response process
Develop and execute plans for communicating security updates

Bachelor's degree in Computer Science, Cybersecurity, or related engineering discipline
15 or more years of technical experience in the medical device industry
Minimum of 10 years of progressive experience in cybersecurity
At least 5 years in a leadership or director-level role
At least 3 years of experience integrating security into embedded systems or connected medical devices in a regulated product development environment
Deep expertise in secure SDLC, threat modeling, and vulnerability management
Strong understanding of cybersecurity landscape, embedded systems security, IoT security, and cloud architectures
Industry-recognized certifications such as CISSP, CISM, or CSSLP are highly valued
Proven experience navigating cybersecurity requirements for FDA 510(k) and PMA submissions

Director – Product Security

Key skills