Job Information
Infoblox Director, Product Security and Compliance in Tacoma, Washington
Description It's an exciting time to be at Infoblox. Named a Top 25 Cyber Security Company by The Software Report and one of Inc. magazine's Best Workplaces for 2020, Infoblox is the leader in cloud-first networking and security services. Our solutions empower organizations to take full advantage of the cloud to deliver network experiences that are inherently simple, scalable, and reliable for everyone. Infoblox customers are among the largest enterprises in the world and include 70% of the Fortune 500. Our success depends on bright, energetic, talented people who share a passion for building the next generation of networking technologies-and having fun along the way. We are looking for a Director of Product Security and Compliance to lead our Product Security Engineering (PSE) team in our Tacoma, WA or Austin, TX locations and represent product security and compliance, reporting to the Senior Director of Engineering. In this role, you will drive and support the PSE team in conducting risk analyses and work with Engineering leadership to ensure the secure delivery of new and existing product features. You will also manage the team and use your technical ability to seamlessly integrate Product Management, Engineering, IT, and Threat Intel objectives. This is an essential position in our Engineering organization with executive-level visibility. You will work with experts on next-generation technology and help drive projects and the portfolio to achieve departmental and corporate goals. You are the ideal candidate if you live and breathe software security and are a skilled problem-solver. What you'll do: Manage product security, compliance, and risk across all Infoblox customer products-both on-prem and SaaS Champion Infoblox's security efforts to create the most secure products in the space and evangelize the security that Infoblox products provide to our customers Establish a charter for best-in-class product security and drive Engineering teams toward achieving these ideals Work with stakeholders, including Engineering, IT, and Product Management, to define and ensure secure product reviews occur for both new and existing functionality Partner with stakeholders to define and execute the strategic direction for ensuring existing and new regulatory certifications are maintained Engage with Legal and Security Compliance on reviews of customer security contracts, respond to security risk questionnaires (on product security topics), and manage customer audit support Communicate progress by highlighting the accomplishments, risks, mitigation, and other pertinent key performance indicators that feed into Infoblox's overarching business strategy Facilitate continuous training programs for Engineering that reduce risk, ensure security training for all engineers to meet regulatory guidelines Drive product security metrics, allowing management to understand the maturity levels in various areas of product security What you'll bring: 20+ years of product security experience with 5+ years of that time in a leadership role 10+ years of hands-on threat research and intelligence 5+ years of risk management governance and expertise in building, maturing, and advancing information security programs 5+ years of management of security-focused engineers with a track record of development and mentorship 3+ years of experience driving modern technology projects 2+ years managing SOC2, FedRAMP, or ISO 27000 series audits Professional security management certification is highly desirable, such as CISSP or CISM Experience working within a global team structure Solid business analysis or financial modeling skills to run the analysis for various projects Ability to build, lead, and motivate a group of teams and resolve mitigating team conflict What success looks like: After six months, you will... Establish a key role in driving the