Senior Director, Product Security & Innovation

Key Skills

Cyber Security, Design, Effective communication skills, Leadership Skill, Planning and organization, Product Management, Teamwork

Job Description

UKG Global Security organization is seeking a Senior Director of Product Security and Innovation, reporting to the Chief Information Security Officer, to lead and support an existing global team that is responsible for the overall security of the company's products and ensuring that security is integrated into all aspects of product design, development, and delivery. The head of product security works closely with cross-functional teams, including engineering, research and development, and business operations, to create and implement a comprehensive security strategy for the company's products.

This broad leadership role covers the security spectrum from building, testing, and ensuring that our products and operating environments are secure from the start and remain resilient to an ever-evolving threat. Key areas will include Security architecture, design, security reviews, security testing, security automation, security research & development, and managing the secure software development lifecycle and associated controls to create and implement a comprehensive security strategy for the company's products.

Primary/Essential Duties and Key Responsibilities:

• Hire, lead, and grow a diverse team, inclusive culture, and collaborative processes that reward behaviors in addition to delivery
• Provide strategic direction, set OKRs, and structure and resource the organization and the work in a way that improves the impact of the team across the different areas of business
• Define the strategy for product and data security, supporting all UKG business segments and provide thought leadership to Enterprise Information Protection leadership team to mature the security program at UKG
• Oversee critical cybersecurity areas including product security architecture and engineering, security development, security research, and security third party reviews
• Lead the security assurance initiatives and make sure cloud, technology, infrastructure, and application security teams are navigating towards compliance to established best practices
• Create and promote security best practices such playbooks and standards
• Support the teams to identify patterns that can be automated to ease the adoption of security controls and help the organization to shift left and achieve results and time to market with acceptable level of security
• Build strong relationships within the product, engineering, IT (Information Technology), cloud, and infrastructure teams to implement the appropriate security controls and/or help the organization to be successful with the support of Global Security
• Drive a data-based approach to security and utilize technology and/or business relevant metrics to measure the efficiency and effectiveness of the program, facilitate capacity planning and resource allocation to increase the maturity of the security program
• Explore and innovate through different areas of security R&D including but not limited to Machine Learning and its applications in security, data streaming for security enforcement and detections, authentication, encryption, and other related areas
• Provide technical leadership and guidance to both your team members, peers, and other leaders in the organization
• Architect strategies to manage and control team workloads

Qualifications

• 10+ years' experience in leading, managing and hiring teams, hands-on technical leadership, system design and programming experience, threat modeling, security code review and security automations such as DAST/SAST
• Experience leading cross-functional teams and implementing security initiatives
• Excellent communication and leadership skills
• Experience with Product security testing and vulnerability assessment
• Demonstrated knowledge of threat modeling and architectural product security fundamentals
• Ability to drive change and scale processes in a fast paced and changing environment
• Experience influencing the organization and team to lead and/or push successful products/projects/process
• Distributed systems and architecture/system design experience
• Self-Lead and Exceptional communication skills with diverse audiences - Strong critical thinking and analytical skills
• Teamwork, influencing, leading, and following, including the ability to drive projects and initiatives in multiple departments
• Demonstrated ability to identify risks associated with business processes, operations, information security programs and technology projects
• The ability to be an enterprise security subject matter expert who can explain technical topics to those without a technical background
• Experience with Public cloud.