Director, Product Security

Company: Fortive
Location: Everett
Posted on: April 4, 2021

Job Description:

COVID-19 update: To keep all of us safe and healthy, we're--making changes to our job postings and hiring process. Learn more Operating Company: Fortive Corporate category: Information Technology location: Everett, Washington, United States Posting Date: Feb 9th 2021 Job Schedule (FT/PT): Full-time Job Level: Director Requisition Number: FOR000660 Fortive is currently seeking a Director of Product Security to lead the Product and Application Security team. As one of the most senior members of the Fortive security leadership team, this individual would have global responsibility for the management of all aspects of securing our products and applications through a secure development lifecycle, from threat models, to security architecture, to design reviews, to secure CI/CD, to pentesting. You'll be part of a dynamic team that is focused on execution and delivery and provide leadership across Fortive's broad portfolio of operating companies. This role is hands-on as well as scales to that of running a broad set of responsibilities with senior executive visibility and reporting.This position will report directly to the global Chief Information Security Officer.Key Duties and Responsibilities:

• Leading Fortive's product and application security function, including planning and development of the company's security strategy in support of the strategic business plan.
• Driving best-in-class product and application security standards and frameworks.
• Focus on SDLC, client data encryption and protection, cloud security, key management and code signing, and product and application incident and vulnerability management.--
• Identifying security technologies and trends ensuring Fortive's products and operating environments keep pace with technological changes and innovation.
• Defining and executing product and application security communication, training and awareness programs.
• Hiring and developing the product and application security team to grow to the next level of maturity and scalability.
• Produce operational metrics to highlight trends and detail organizational effectiveness.
• Collaborating with IT and engineering teams to design and implement security controls that enable business initiatives and reduce risk in our products and applications.
• Be able to build strong partnerships with stakeholders across Fortive's diverse engineering functions, leverage strong interpersonal skills to ensure the product and application security team is business enabler and doesn't stifle engineering innovation.
• Define strategic secure development lifecycle roadmap and associated time frames and barriers to entry for methodically improving Fortive's secure development practices and enabling market differentiation.--
• Other duties and obligations as assigned by the CISO
  Minimum QualificationsDemonstrated experience managing within an enterprise-level information security program; Experience managing vendors and service providers and performing oversight for the delivery of security capabilities; Significant technical knowledge of information technology security programs, concepts, processes, trends, and best practices; Demonstrated knowledge of internal controls and enterprise risk management programs; Leadership experience with multiple, cross-functional teams or projects, and influencing key stakeholders; Demonstrated knowledge of business principles including general management, human relations, conflict resolution, finance and budget, project management and business strategic planning and Demonstrated possession of sound judgment, highly developed negotiation and facilitation skills and excellent communication skills.--Preferred Qualifications:
  • Bachelor's degree in related discipline (Information Systems, Computer Science or related field)
  • Certifications in one or more of the following, CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), etc., highly desirable.
  • 10+ years of cyber and information security experience
  • 6+ years of supervisory experience, at least 2 years at Director level or higher
  • 5+ years of software development--
  • Experience in penetration testing / red team / vulnerability assessment
  • Advanced working knowledge of cyber and information security standards, frameworks, technologies, control strategies, compliance practices
  • Strong verbal and written communication skills, excellent judgment and interpersonal skills
  • Experience in managing diverse security functions in a global capacity
  • Experience in delivering large, multi-faceted security programs at a global enterprise scale
  • Detailed knowledge of security domains and common security controls
  • Expertise in common system, software and web application vulnerabilities (e.g., OWASP Top 10)
  • Able to deliver quality results in a high-energy/high-pressure environment
  • Ability to multi-task and manage demands of many projects, issues, and tasks Fortive is headquartered in Everett, Washington, and employs more than 24,000 research and development, manufacturing, sales, distribution, service, and administrative employees in more than 40 countries worldwide. Our team grows by tackling challenges that accelerate progress and further their careers. With a culture rooted in continuous improvement, the core of our company's operating model is the Fortive Business System. For more information, please visit: www.fortive.com . About Fortive: Fortive is a diversified industrial growth company comprised of global businesses that are recognized leaders in attractive markets. With more than $6 billion in annual revenues, Fortive's well-known brands hold leading positions in field instrumentation, transportation, sensing, product realization, automation, health, and franchise distribution. "The company in which you have expressed employment interest is a subsidiary or affiliate of Fortive Corporation. The subsidiary or affiliate is referred to as a Fortive Company. Fortive Corporation and all Fortive Companies are equal opportunity employers that evaluate qualified applicants without regard to race, color, national origin, religion, ancestry, sex (including pregnancy, childbirth and related medical conditions), age, marital status, disability, veteran status, citizenship status, sexual orientation, gender identity or expression, and other characteristics protected by law. The "EEO is the Law" poster is available at: http://www.dol.gov/ofccp/regs/compliance/posters/pdf/eeopost.pdf. Individuals who need a reasonable accommodation because of a disability for any part of the employment process should call 1-866-272-5573 or e-mail applyassistance@fortive.com to request accommodation." Get tailored job recommendations based on your interests. Category: Science & Engineering Location: Everett, Washington, United States Job Type: Full-time Category: Information Technology Location: Everett, Washington, United States Job Type: Full-time Category: Information Technology Location: Everett, Washington, United States Job Type: Full-time Category: Corporate Location: Irvine, California, United States Job Type: Full-time Category: Corporate Location: Everett, Washington, United States Job Type: Full-time For you. For us.
    For growth.
    We have the soul of a start-up, but the benefits and learning opportunities of a larger company. That means you can aspire high, matter more, and distinguish yourself through your contributions.--We are a place where people who share a drive and passion to make a personal difference can learn, grow, and achieve. Join Our Talent Community We will notify you about relevant positions, and keep you in mind whenever we have interesting opportunities. Come get them. Fortive Corporation and all Fortive Companies are equal opportunity employers that evaluate qualified applicants without regard to race, color, national origin, religion, sex, age, marital status, disability, veteran status, sexual orientation, gender identity or expression, or other characteristics protected by law. Individuals who need a reasonable accommodation because of a disability for any part of the employment process should call 1-866-272-5573 or e-mail applyassistance@fortive.com to request accommodation.

Keywords: Fortive, Everett , Director, Product Security, Executive , Everett, Washington