Senior Director, Product & AI Security

Senior Director, Product & AI Security

THE ROLE

Reporting directly to the Fortive Chief Information Security Officer, you will be responsible for delivering strategic vision and operational oversight for Product Security and Artificial Intelligence (AI) Security across the enterprise. This role will lead the development and execution of a comprehensive security strategy that embeds secure-by-design principles into software, connected products, firmware, and AI-enabled capabilities.

You will work across operating companies, engineering, product management, R&D, legal, and compliance teams to ensure product security, AI security, and secure-by-design controls are integrated throughout the product lifecycle. This leader will define enterprise standards, drive measurable risk reduction, and enable innovation by aligning security controls with business objectives, regulatory expectations, and customer commitments.

You will lead, coach, mentor, and develop a high-performing team of product and AI security professionals operating across Fortive and its operating companies.
REPORTS TO

VP & Chief Information Security Officer at Fortive
TEAM

Team consists of FTEs, contractors, and third-party security partners supporting product security engineering, AI security engineering, secure development lifecycle, and vulnerability management.
WHAT YOU WILL DO

Product & AI Security Strategy: Develop and implement a comprehensive product and AI security strategy aligned with business objectives, growth initiatives, and regulatory requirements. Establish enterprise standards for secure software development, AI model security, data protection, and product security risk management.

Secure Development Lifecycle (SDLC): Embed security and AI security controls into the full product lifecycle, including requirements definition, architecture, design, development, testing, deployment, and sustainment. Drive consistent adoption of threat modeling, secure coding standards, code scanning, software bill of materials, and vulnerability remediation processes.

AI Security & Model Risk: Own the AI security program, including threat modeling and adversarial/red-team testing of AI systems; protection against prompt injection, model exfiltration, and data leakage; AI supply-chain and third-party/foundation-model risk; discovery and management of shadow AI; security of AI-assisted code generation and protection of intellectual property; and secure use of agentic AI, including non-human identities, tool and protocol integrations, and segregation-of-duties controls. Provide risk-tiered security review and recommendations on AI use cases and models, and represent Security on the AI Governance Committee in an advisory capacity, with business owners remaining accountable for use-case decisions.

Security Architecture for Products: Define and maintain reference architectures and blueprints for secure software, connected devices, cloud-native platforms, and AI-enabled solutions. Ensure scalability, resiliency, and security by design across products and customer environments.

Customer & Regulatory Alignment: Partner with sales, customer success, and legal teams to support customer security reviews, contract requirements, and regulatory obligations. Ensure alignment with global standards and emerging product security and AI regulations, including the EU Cyber Resilience Act and the EU AI Act.

Vulnerability & Incident Management: Oversee product vulnerability management processes, coordinated disclosure, penetration testing, and remediation programs, including scheduling and coordination of external penetration testing vendors and assessors. Ensure rapid response and transparent communication for product security incidents.

Software Supply Chain & Code Signing: Own software supply chain integrity for products, including code signing, build and release integrity, third-party and open-source component risk, and protection of intellectual property from exfiltration or malicious code insertion.

Acquisition Integration: Ensure product and AI security capabilities are scalable and capable of integrating acquired technologies efficiently while maintaining consistent enterprise standards.

Automation & Operational Efficiency: Drive automation and efficiency across product security operations, reducing manual effort and cycle times for vulnerability management, security reviews, and reporting while scaling coverage across operating companies.

Metrics, Reporting & Continuous Improvement: Establish measurable, OpCo-level product and AI security metrics that operating companies can track and improve over time. Provide regular reporting to executive leadership and the Board on product and AI security risk and program effectiveness, drive accountability, and continuously improve the program.

Key Partners: Work in close partnership with AI enablement, governance, risk and compliance, legal, and privacy functions, each of which has distinct accountabilities, to ensure clear decision rights and consistent engagement with operating companies.
WHO YOU ARE

Minimum of 8 years of executive leadership experience in product security, application security, or AI security.

Minimum of 12 years of progressive experience in enterprise information security, software engineering security, or related risk management roles within a large global enterprise.

Deep expertise in secure software development, cloud-native architectures, DevSecOps, API security, and modern application security practices.

Experience building AI security programs, including model and AI supply-chain risk management, and contributing to cross-functional AI governance within product environments.

Demonstrated ability to lead security transformation in environments experiencing organic growth and acquisitions.

Experience collaborating with engineering, product management, legal, privacy, and compliance teams to translate security requirements into scalable, practical controls.

Strong understanding of global product security and AI regulations (such as the EU Cyber Resilience Act and the EU AI Act), secure coding practices, threat modeling, identity and access management, vulnerability management, and incident response.

Industry-recognized certifications such as CISSP, CISM, or equivalent desired.