Director, Product Security Strategy and Enablement

The Director, Product Security Strategy & Enablement is responsible for defining and operating the Product Security operating model and driving portfolio-level execution across the department. This leader translates Product Security strategy into scalable processes, governance, and execution — providing portfolio-level structure, visibility, and enablement so that work is prioritized, tracked, and reported consistently. Through standardization, automation, and AI-enabled capabilities, this role enables predictable delivery and measurable risk reduction across the program. This position sits within a unified Product Security department — established to address an accelerating, AI-driven threat landscape with enterprise-wide scope across corporate and hotel-managed environments. Reporting to the Head of Product Security, this role provides the connective operating discipline across the Vulnerability Management, Exposure Management, Application Security, and Remediation and Response functions, ensuring the organization operates cohesively as a whole rather than as separate workstreams. Your Day to Day * Set and operationalize Product Security strategy across people, process, and tooling — defining the roadmap, setting OKRs, and running planning, prioritization, and review cadences that translate strategy into execution. * Establish and operate the Product Security operating model — including documented processes, decision forums, decision rights, execution standards, and governance cadences across all workstreams. * Provide portfolio-level structure and executive visibility into outcomes — ensuring work across Vulnerability Management, Exposure Management, Application Security, and Remediation and Response is prioritized, tracked, and consistently reported through KPIs, leadership updates, and monthly and quarterly business reviews. * Own portfolio, budget, and vendor management — including budget forecasting, the security tool portfolio, renewals, statements of work, and vendor performance — in partnership with Finance and Procurement. * Define, enforce, and mature secure SDLC governance — establishing mandatory security requirements and quality gates across planning, design, build, release, and operate; governing threat modeling standards and integration; and managing exceptions, risk acceptances, compensating controls, and their expirations. * Lead continuous compliance and audit enablement for product-security-related controls — coordinating evidence, embedding and monitoring controls, and driving remediation of audit findings to closure. * Govern large and/or complex remediation programs — providing program-level structure, milestones, and escalation paths — and enable scale and efficiency through process standardization, automation, and AI-enabled capabilities that reduce manual effort and increase execution consistency. * Lead, coach, and develop the portfolio, programs, and compliance functions while partnering with Product Security leaders and cross-functional stakeholders across ETS, the broader Product and Technology organization, business information security officers, centers of excellence, Finance, and Procurement to align strategy, delivery, and measurement. What We Need From You * 10+ years of progressive security experience across multiple disciplines, technologies, or processes, including 5+ years establishing organizational structure and managing subordinate teams. * Substantial leadership-level experience across product and application security domains — vulnerability management, application and API security, exposure and attack-surface management, and remediation operations — with a thorough understanding of the software and system development lifecycle. * Expert in secure SDLC governance, security controls, and quality gates, with familiarity across the full lifecycle tooling ecosystem including SAST, SCA, DAST, secrets detection, API security, cloud posture, and attack-surface and asset-management tooling. * Demonstrated experience defining and operating an operating model — processes, governance, decision forums, and execution cadence — across multiple functions or workstreams, with strong portfolio and program management capability from conception through implementation (milestones, risks, success criteria). * Proven experience owning budgets, tool portfolios, statements of work, vendor contracts, and vendor performance, with general knowledge of budgeting, cost estimation, and scheduling; skilled at defining KPIs and metrics and driving maturity improvement with strong executive reporting. * Working knowledge of compliance and audit enablement for product-security-related controls (e.g., PCI, SOX), including evidence coordination and control monitoring, and familiarity applying automation and AI-enabled capabilities to scale security workflows. * Demonstrated effectiveness in executive presentation, escalation management, and leadership by influence — able to build relationships with senior technology and business leaders, adapt to multiple management styles, and communicate highly technical information clearly across all levels of the organization. * Proven change agent and team builder — result-focused, action-oriented, and able to manage changing priorities in a highly dynamic environment while leading, developing, and inspiring multi-disciplined teams. Travel - 10% Location - Atlanta, GA: Our hybrid work structure is an expectation of three (3) days a week in office. This expectation may be adjusted to evolve with the changing needs of the business. At IHG, we’ve made a promise. As one of the world’s leading hotel groups, we’re here to deliver True Hospitality for Good. Making our guests and colleagues feel welcome, cared for, recognised and respected – wherever they are in the world. Want to be part of the journey? Who we are At IHG Hotels & Resorts, we work together to deliver True Hospitality for Good on a global scale. With corporate offices and over 6,000 hotel destinations worldwide, a career at IHG is the perfect way to broaden your horizons. You’ll experience our unique culture and brilliant colleagues who will support and inspire you. With a host of corporate opportunities to choose from, wherever you are on your career journey, and whatever you want to achieve there’s Room for You at IHG. Over recent years, we’ve transformed our company. We have bold ambitions to drive performance and maintain our relentless focus on growth in order to be the hotel company of choice that guests & owners love. We are a hospitality business at our core and value connections and being together helps us foster a unique sense of belonging that also supports productivity. That’s why here at IHG, we give our colleagues flexibility and balance – working in a hybrid way, blending office and remote working collectively. We recognise that every role is different, that’s why leaders work with teams to determine how and when they collaborate. We provide a wide range of benefits designed to help you live your best work life. These include impressive room discounts across our many properties, recharge days and volunteering days throughout the year. Through our myWellbeing framework, we are committed to supporting wellbeing in your health, lifestyle, and workplace. We offer a unique and inclusive culture, where there is always Room for You to belong, grow and make a difference. Our mission is to welcome everyone and create inclusive teams where we celebrate difference and encourage colleagues to bring their whole selves to work. IHG Hotels & Resorts provides equal employment opportunities to applicants and employees without regards to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or any other category protected by applicable laws. We promote a culture of trust, support, and acceptance. Always welcoming different backgrounds, experiences, and perspectives.