VP, Product Security

Your Role

The Commercial Product Security organization is responsible for ensuring that security is embedded throughout the lifecycle of Stellarus commercial products, platforms, and technology services. The Vice President, Product Security will establish and lead the enterprise product security strategy, governance framework, and operating model to protect Stellarus commercial products, customer data, and digital ecosystems while enabling innovation and business growth.

This executive leader will partner closely with Product, Engineering, Risk Management, Privacy, Compliance, and Legal business leaders to build secure-by-design capabilities that scale across Stellarus' portfolio of healthcare technology solutions. The role will oversee product security engineering, application security, cloud security, DevSecOps, vulnerability management, security architecture, and product security governance programs.

Our leadership model is about developing great leaders at all levels and creating opportunities for our people to grow - personally, professionally, and financially. We are looking for leaders that are energized by creative and critical thinking, building and sustaining high-performing teams, getting results the right way, and fostering continuous learning.

Required Knowledge and Experience

• (Bachelor's degree in Computer Science, Engineering, or a related technical field) or (18+ years of relevant experience (as shown below) in lieu of a degree).
• 12+ years of relevant experience in information security, cybersecurity, product security, application security, cloud security, software engineering security, or related disciplines, with a proven track record of leading enterprise-scale security programs and technical organizations.
• 7+ years of leadership experience leading managers and/or large-scale security organizations, with a proven track record of building high-performing teams and developing talent.
• At least one industry standard certification e.g., CISSP, CISM or CCSP
• Proven executive leadership experience developing and scaling enterprise Product Security programs in complex, highly regulated environments.
• Deep expertise in secure software development lifecycle (SSDLC), application security, DevSecOps, cloud security, API security, and software supply chain security.
• Strong understanding of modern cloud platforms, microservices architectures, containerized environments, and platform engineering practices.
• Experience implementing and operationalizing security frameworks and standards such as NIST CSF, NIST SSDF, ISO 27001, CIS Controls, SOC 2, and OWASP.
• Demonstrated success integrating security into agile and product-centric operating models.
• Strong knowledge of threat modeling, vulnerability management, penetration testing, code analysis, and secure architecture review methodologies.
• Experience managing security risks associated with customer-facing products, digital platforms, APIs, and cloud-native applications.
• Proven ability to translate business strategy into actionable security roadmaps, investment plans, and measurable outcomes.
• Strong financial and operational acumen, including experience managing budgets, prioritizing investments, and optimizing organizational performance.
• Excellent communication, stakeholder management, and executive presentation skills with the ability to influence technical and non-technical audiences.
• Experience collaborating with executive leadership, boards, customers, regulators, and external auditors.

Preferred Knowledge and Experience

• Experience in healthcare, health plans, healthcare technology, payer/provider ecosystems, or other highly regulated industries.
• Experience securing SaaS platforms, healthcare data products, AI/ML solutions, and cloud-native digital services.
• Familiarity with healthcare regulatory requirements including HIPAA, HITRUST, CMS regulations, and emerging healthcare cybersecurity guidance.
• Experience leading product security programs supporting commercial software products and enterprise platforms.
• Professional certifications such as CISSP, CISM, CCSP, CSSLP, GIAC, or equivalent.
• Advanced degree in Cybersecurity, Computer Science, Engineering, Information Systems, or a related field.
• Experience serving as a security executive, security officer, or equivalent leadership role in a technology-driven organization.