Senior Manager- Product Security Technical Risk Management

Samsung - Cary, NC

Full-time - Senior

Remote - Cary, NC

Merchant Wholesalers, Durable Goods

About the position

The Senior Manager- Product Security Technical Risk Management will lead SAS's product security initiatives, fostering a high-functioning security organization that attracts and retains talent. This role is pivotal in ensuring the security of software development by advocating for best practices, integrating security tools into development processes, and managing team operations to enhance security maturity and mitigate risks.

Responsibilities

• Build relationships with product management, engineering, and architecture teams to advocate for better security practices.
• Report on the organization's security initiatives and make strategic recommendations to improve security maturity.
• Drive requirements for integrating application security tools into the enterprise DevOps practice or CI/CD pipeline.
• Oversee day-to-day operations of the team, ensuring clear understanding and continuous improvement of processes with product and engineering teams.
• Manage teamwork, performance management, feedback, and professional growth in collaboration with HR and leadership.
• Collaborate with senior management on complex decisions or projects.
• Function as an advisor regarding skills development, tasks, projects, and operations.
• Mentor and develop product security talent.
• Ensure compliance with security policies and processes to support secure software development goals.

Requirements

• 8+ years experience in software development, system architecture and design, software testing, or related experience.
• 5+ years hands-on experience with product security or application security software development lifecycle.
• 3-5 years' experience leading engineering teams focused on application and/or product security.
• Bachelor's degree in a quantitative field, preferably in Computer Science or a related discipline.
• Experience developing partnerships with engineering teams to deliver secure code effectively.
• Proven written and verbal communication skills, adaptable to different audiences.
• Strong track record of managing performance and building high-performing, inclusive security teams.
• Ability to identify and leverage opportunities to accelerate results.

Nice-to-haves

• Expert knowledge of Secure Development Lifecycle methodology and secure development best practices.
• Familiarity with cybersecurity threats, countermeasures, and issues.
• Strong foundation in core information security and/or cyber security principles.
• Familiarity with SaaS security considerations including public cloud security deployment (Azure, AWS).

Benefits

• Comprehensive medical, prescription, dental and vision plans.
• Industry-leading 401k plan.
• Generous vacation time and paid holidays.
• U.S. Winter Wellness Break between December 25 and January 1.
• Volunteer Time Off and parental leave.
• Unlimited paid sick days.
• Generous childcare benefits for all full-time employees.