Director of Product Security

Help Shape the Future of Product Security in Fintech

Thrively has partnered with a rapidly evolving financial technology company whose platform powers millions of consumer financial experiences each year. Their products sit behind some of the largest brands in retail and digital commerce, making this an opportunity to build security at massive scale.

We're seeking a Director of Product Security to lead and evolve a modern Product Security program that is deeply embedded within engineering. This is a highly visible leadership opportunity for someone who thrives on building programs, influencing engineering culture, and partnering with technical leaders to deliver secure products without sacrificing speed or innovation.

You'll own the Product Security strategy, lead a talented team, and work alongside Engineering, Product, and DevOps leaders to build security directly into the software development lifecycle.

While this is a leadership role, we're looking for someone who still enjoys rolling up their sleeves - someone who can dive into complex technical findings, guide engineering teams through remediation, and help shape the future of secure software development across the organization.

If you're passionate about building secure products, enabling engineering teams, and creating security programs that scale, we'd love to tell you more.

What You'll Do

• Own and execute the organization's Product Security strategy, roadmap, and long-term vision.
• Lead, mentor, and grow a high-performing Product Security team.
• Partner closely with Engineering, Product, and DevOps teams to embed security throughout the software development lifecycle.
• Build scalable, automated security capabilities within modern CI/CD pipelines.
• Establish security architecture standards and secure-by-design principles for new products and platform enhancements.
• Evaluate emerging security technologies, tools, and vendors to continually strengthen the organization's security posture.
• Prioritize security initiatives based on business impact and risk while influencing engineering and executive stakeholders.
• Perform deep technical reviews of application security findings and partner directly with engineering teams through remediation.
• Develop security policies, standards, and engineering best practices that elevate security maturity across the organization.
• Identify product security risks and drive strategic improvements that strengthen customer trust and platform resilience.

What We're Looking For

• Bachelor's degree required.
• 8+ years of experience in Information Security.
• 2+ years of experience focused on Product Security or Application Security.
• 3+ years of experience leading technical security teams.
• Demonstrated success building or maturing Product Security or Application Security programs.
• Deep understanding of secure software development practices and modern application security.
• Experience partnering closely with software engineering organizations to integrate security into development workflows.
• Proven ability to influence cross-functional leaders and drive organizational change.
• Strong technical depth with the ability to balance strategic leadership and hands-on execution.
• Excellent communication skills with the ability to translate complex security concepts for both technical and executive audiences.

Ideal Experience

• Product Security
• Application Security
• Secure Software Development Lifecycle (SSDLC)
• DevSecOps
• CI/CD Security
• Threat Modeling
• Security Architecture
• Vulnerability Management
• SAST, DAST, and Software Composition Analysis (SCA)
• Engineering Leadership
• Security Strategy & Governance

Why This Opportunity?

This is an opportunity to make a meaningful impact at a company where security is viewed as a strategic investment—not simply a compliance requirement. You'll help shape the future of Product Security by partnering directly with engineering leadership, influencing technical direction, and building security into products that power millions of consumer financial experiences every year.

You'll have the autonomy to build, the technical depth to stay close to the work, and the executive visibility to drive lasting change across the organization.