Cybersecurity Director - Product Security Solutions

Leverage technology to impact patients and ultimately save lives. 

Do you have expertise in, and passion for, cyber security? Would you like to apply your expertise to impact the product security in a company that follows the science and turns ideas into life changing medicines? If so, AstraZeneca might be the one for you! 

About AstraZeneca

AstraZeneca is a global, science-led, patient-focused biopharmaceutical company that focuses on the discovery, development, and commercialization of prescription medicines for some of the world’s most serious disease. But we are more than one of the world’s leading pharmaceutical companies. At AstraZeneca we are dedicated to being a Great Place to Work. 

About our Team

It is a dynamic and results-oriented environment to work in – but that’s why we like it. There are countless opportunities to learn and grow, whether that’s exploring new technologies in hackathons, or redefining the roles and work of colleagues, forever. Shape your own path, with support all the way. Diverse minds that work cross- functionally and broadly together.

Introduction to role

Our increased focus on Digital, AI & ML, Data & Data Science along with joint ventures and collaboration with third parties are crafting new opportunities within the Cyber Security team. We are looking for an experienced and strategic Product Security Leader to join our dynamic team. In this role, you will be responsible for shaping the overall security strategy for our products, ensuring the secure design, development, and deployment across the entire product lifecycle. You will help streamline the current product security efforts across various product teams, build the core product security team, collaborate with engineering, development, and cross-functional teams, and drive security initiatives across all stages of product development.

The ideal candidate will have a strong background in system development lifecycle, software or product development experience, software security, threat modeling, and a proven track record of building scalable security programs in a fast-paced, innovation-driven environment. This role requires both technical expertise and leadership skills to influence product design decisions and create a secure-by-design culture.

Accountabilities

Collaboration: Partner with product development, engineering, DevOps, and other teams to identify security requirements, influence design decisions, and ensure security best practices are followed throughout the development lifecycle.
Develop and Lead Product Security Strategy and roadmap for target product domains: Own the vision, roadmap, engineering, and execution of the product security strategy, ensuring the development of trust-by-design products and services.
Product Vulnerability Management: Collaborate with product teams and oversee the identification, prioritization, and mitigation of security vulnerabilities and issues. Lead and coordinate efforts for secure code reviews, threat modeling, penetration testing, and vulnerability assessments.
Risk Management: Assess security risks across product portfolios and recommend remediation strategies while balancing business and technical needs.
Secure Development Lifecycle (SDL): Implement and enforce secure development lifecycle practices including tooling, ensuring products are designed and developed with security built in.
Training and Awareness: Lead initiatives to increase security awareness and knowledge among engineers and product teams through training, workshops, and the development of security resources.
Compliance: Ensure adherence to relevant regulatory requirements and industry best practices related to product security (e.g., GDPR, SOC2, OWASP, etc.).
Leadership: Build, mentor, and lead a high-performing product security team. Foster a culture of security excellence and innovation.

Essential Skills/Experience:

• Bache