Senior Director Product Security (Cybersecurity)

Location: Waukesha, Wisconsin, USA

Company

hirify.global develops connected energy technologies and solutions that protect homes, strengthen businesses, and support a more resilient energy future.

What you will do

• Set the enterprise-wide product security strategy and multi-year roadmap for connected products, energy technologies, software, and digital services.
• Define and operationalize a secure development lifecycle covering threat modeling, secure coding, security testing, security gates, software bills of materials, supply-chain security, and vulnerability management.
• Lead adoption of IEC 62443, including preparation for IEC 62443-4-1 certification and foundations for IEC 62443-4-2 and IEC 62443-3-3 certification.
• Build and lead Product Security Incident Response, coordinated vulnerability disclosure, public vulnerability intake, and customer security advisories.
• Translate the EU Cyber Resilience Act, UK product security requirements, and emerging regulations into engineering requirements, evidence, documentation, and certification outcomes.
• Build and develop a product security organization while partnering with Engineering, Information Security, Legal, Quality, Product Management, executives, customers, auditors, and regulators.

Requirements

• Bachelor’s degree in Engineering, Computer Science, Cybersecurity, or a related field; equivalent experience may be considered.
• At least 12 years of cybersecurity, product security, or secure engineering experience, including 7 years leading teams and other managers or senior engineers.
• Experience building or substantially maturing product security programs for connected, embedded, or industrial products.
• Hands-on leadership of secure development lifecycle and product security incident response capabilities.
• Practical experience applying IEC 62443 to products, including familiarity with the path to IEC 62443-4-1 certification.
• Experience with global product security regulations such as the EU Cyber Resilience Act or comparable regimes.

Nice to have

• Advanced degree in Engineering, Cybersecurity, or Computer Science.
• CISSP, CSSLP, GICSP, ISA, IEC 62443, cloud, or equivalent product security certifications.
• Experience in energy, power, industrial, or connected consumer product environments.
• Experience securing operational technology, embedded systems, cloud-connected services, and mobile applications.
• Experience aligning product security with enterprise security through shared incident response and governance.

Culture & Benefits

• Opportunity to influence product innovation, customer trust, regulatory readiness, and secure energy technology.
• Work with engineering organizations across multiple business units and establish product security champions and practices.
• Engage with executive leadership, board members, customers, auditors, and regulatory agencies on product security strategy and risk.
• Equal opportunity employment environment.