Director, Global Product Security

Job description

Molex is seeking a Director, Global Product Security to establish and lead our global product security strategy across a diverse portfolio spanning data communications, consumer electronics, industrial, automotive, commercial vehicle, aerospace & defense, and medical devices. This leader will define and drive a horizontal product security strategy and operating model that can be applied consistently across business units while accommodating the unique regulatory, safety, cybersecurity, customer, and mission requirements of each market. The role will establish product security standards and governance, provide security consulting to development teams, mature secure product development practices, and establish and operate a global Product Security Incident Response Team (PSIRT). Our Team The Molex Cybersecurity team plays a pivotal role in safeguarding the organization’s complex global enterprise, product and manufacturing ecosystem. In an environment governed by a myriad of regulatory requirements and industry standards, the team partners with global Digital and business teams to proactively develop and operate a robust cybersecurity program designed to fortify the company’s overall security posture. Molex brings together innovation and technology to deliver electronic solutions to customers worldwide. With a presence in more than 40 countries, Molex offers a full suite of solutions and services for many markets, including data communications, consumer electronics, industrial, automotive, commercial vehicle, aerospace & defense and medical. What You Will Do Define and lead the company-wide product security strategy and governance structure across product lines and geographies. Establish a scalable product security framework, policies, standards, engineering requirements, maturity model, metrics, with flexibility for business-unit, regulatory, customer, and mission-specific needs. Partner with senior engineering and business leaders to integrate security into product lifecycle and business decisions, and to establish clear accountability between the central Product Security organization and product-development teams. Provide direct consulting to development organizations, including threat modeling, attack-surface analysis, security architecture and design reviews, risk assessments, vulnerability analysis, and security testing. Establish and continuously improve a Secure Product Development Lifecycle integrated with existing engineering, quality, safety, regulatory, and product-development processes, including risk-based security gates, evidence requirements, exceptions, and acceptance criteria. Establish and operate a global PSIRT, including vulnerability intake, triage, investigation, severity and prioritization, remediation coordination & disclosure. Establish and mature software bill of materials (SBOM), software composition analysis, open-source security, and broader software and product supply-chain security practices. Translate applicable industry, regulatory, contractual, and customer requirements into practical engineering standards across medical devices, automotive, optical networking and telecommunications, defense, and other technology portfolios. Develop reusable security patterns, reference architectures, tools, guidance, training, communities of practice, and security-champion programs that strengthen product security capability and culture. Monitor emerging threats, technologies, regulations, standards, and customer expectations and translate them into product security priorities, roadmaps, and investment plans. Represent Product Security in executive, customer, researcher, supplier, government, and strategic-partner engagements, as appropriate. Who You Are (Basic Qualifications) Bachelor’s degree in cybersecurity, information technology, computer science, engineering, risk management, business, or a related discipline. 10 or more years of progressive experience in product security in global organizations. Experience establishing, leading and scaling product security programs across complex global technology portfolios, and geographically diverse development teams. Experience establishing and operating a co-ordinated vulnerability disclosure and PSIRT or product vulnerability-response program. Deep experience with secure product development, security architecture, threat modeling, vulnerability management, security testing, and software supply-chain security. Experience developing enterprise product security standards, policies, engineering requirements, governance mechanisms, training and metrics. Experience working directly with engineering and product-development organizations in regulated, safety-critical, or mission-critical environments, and influencing senior technical and business leaders across organizational boundaries. Ability to communicate complex technical and product risk clearly to executive, engineering, customer, and external audiences. Ability to travel 10-20% domestically and internationally. What Will Put You Ahead Experience across multiple industries represented in the Molex portfolio, particularly medical devices, automotive, telecommunications or networking, and defense. Experience with embedded systems, firmware, hardware security & industrial or connected products. Deep knowledge of relevant frameworks and requirements such as FDA pre and post market guidance, EU MDR, EU Cyber Resilience Act, NIST Secure Software Development Framework & coordinated vulnerability disclosure. For this role, we anticipate paying $170,000 - $195,000 per year. This role is eligible for variable pay, issued as a monetary bonus or in another form. At Koch companies, we are entrepreneurs. This means we openly challenge the status quo, find new ways to create value and get rewarded for our individual contributions. Any compensation range provided for a role is an estimate determined by available market data. The actual amount may be higher or lower than the range provided considering each candidate's knowledge, skills, abilities, and geographic location. If you have questions, please speak to your recruiter about the flexibility and detail of our compensation philosophy. Hiring Philosophy All Koch companies value diversity of thought, perspectives, aptitudes, experiences, and backgrounds. We are Military Ready and Second Chance employers. Learn more about our hiring philosophy here . Who We Are At Koch, employees are empowered to do what they do best to make life better. Learn how our business philosophy helps employees unleash their potential while creating value for themselves and the company. Our Benefits Our goal is for each employee, and their families, to live fulfilling and healthy lives. We provide essential resources and support to build and maintain physical, financial, and emotional strength - focusing on overall wellbeing so you can focus on what matters most. Our benefits plan includes - medical, dental, vision, flexible spending and health savings accounts, life insurance, ADD, disability, retirement, paid vacation/time off, educational assistance, and may also include infertility assistance, paid parental leave and adoption assistance. Specific eligibility criteria is set by the applicable Summary Plan Description, policy or guideline and benefits may vary by geographic region. If you have questions on what benefits apply to you, please speak to your recruiter. Additionally, everyone has individual work and personal needs. We seek to enable the best work environment that helps you and the business work together to produce superior results. Equal Opportunities Equal Opportunity Employer, including disability and protected veteran status. Except where prohibited by state law, some offers of employment are conditioned upon successfully passing a drug test. This employer uses E-Verify. Please click here for additional information. (For Illinois E-Verify information click here , aquí , or tu ). #LI-MS6 #on-site Apply now Sh