Manager - Product Security (Governance)

Location: Chandler, Arizona, United States; regular business hours; travel required 0%–25%

Company

hirify.global develops semiconductor products and solutions for automotive systems, industrial automation, aerospace, medical devices, and the Internet of Things.

What you will do

• Define and deploy product security governance frameworks, risk classification methods, threat modeling processes, security checkpoints, dashboards, and executive reporting across Business Units.
• Translate cybersecurity regulations, standards, and guidance into internal requirements and support readiness for the EU Cyber Resilience Act and other global requirements.
• Govern PSIRT and vulnerability management processes covering intake, triage, validation, severity assessment, remediation, disclosure, advisories, regulatory reporting, CVE assignment, and CNA activities.
• Develop threat modeling templates, decision trees, risk libraries, and assessment criteria; train security champions, architects, and engineering teams.
• Coordinate product security alignment with quality, product development, release governance, Legal, Engineering, Customer Support, Field Applications, and Business Units.
• Monitor standards and regulations and represent Microchip in standards organizations, industry consortia, working groups, certification discussions, and external cybersecurity engagements.

Requirements

• Bachelor’s or Master’s degree in Electrical Engineering, Computer Science, Cybersecurity, Embedded Systems, or a related field.
• 12.5+ years of experience in cybersecurity, product security, embedded security, semiconductor security, or related technical disciplines, including 5+ years in product security governance, secure development lifecycle, security program management, or regulatory readiness and 3+ years in a leadership or senior role driving cross-functional initiatives across multiple teams or Business Units.
• Strong understanding of embedded systems, semiconductor products, firmware, software, hardware security, cryptography, and product lifecycle processes.
• Experience with the EU Cyber Resilience Act, RED cybersecurity requirements, NIS2, EUCC, SESIP, Common Criteria, or related cybersecurity regulatory frameworks.
• Experience with product security governance frameworks, threat modeling, risk assessment, vulnerability management, or PSIRT processes.
• Familiarity with IEC 62443, ISO 21434, OWASP, STRIDE, MITRE ATT&CK, EMB3D, or similar frameworks.
• Experience translating regulatory, customer, and standards requirements into practical engineering and governance processes.
• Strong stakeholder management skills across engineering, quality, legal, compliance, sales, field applications, and executive audiences.
• Ability to lead cross-functional initiatives and influence stakeholders across global Business Units without direct authority; strong written and verbal communication skills, including executive reporting and customer-facing security communications.

Nice to have

• Experience in semiconductor, embedded systems, industrial automation, automotive, IoT, medical, or security certification domains.
• Experience with threat modeling tools, SBOM tooling, CVE processes, CNA operations, vulnerability databases, and open-source vulnerability monitoring.
• Experience participating in standards bodies, working groups, industry associations, or regulatory consultations.
• Experience working with notified bodies, cybersecurity labs, certification bodies, or external assessors.
• Program management experience with KPI dashboards, governance cadence, cross-Business Unit execution tracking, and maturity models.

Culture & Benefits

• Full-time role within a 17,000-member global organization.
• Culture centered on trust, empowerment, respect, diversity, communication, employee development, and values-based decision making.
• Leadership Passage Programs and ongoing career growth opportunities.
• Regular business hours with physical activity consisting of approximately 70% sitting, 15% standing, and 15% walking.
• Equal opportunity and affirmative action employer.