Director of Product Security Summary: The Wikimedia Foundation is looking for a Director of Product Security to help develop, cultivate, and progress the security and privacy of our product services and systems. The Director of Product Security will join the other Engineering Directors at Wikimedia who lead engineers building and operating features, products, and services used by hundreds of millions of people around the world. This is an opportunity to do good while improving the security, privacy, resilience, scalability, and maintainability of one of the top 15 websites in the world.
This is a remote position; open to most locations in the world. Some travel required.
You are responsible for: The global product security program, consisting of, but not limited to, the following domains: Application Security Engineering, Threat Intelligence, Vulnerability Management, Security Incident Response, Privacy Engineering, Pen Testing, and Capabilities Management.Providing strategy, leadership, staffing, and budgetary requirements across a portfolio of security services in the above domains.Ensuring the privacy, security, and integrity of our software products.Leading the collaborative creation and maintenance of product and platform security policy.Educating staff and volunteer technical contributors in secure software engineering practices.Evaluating current capabilities in conjunction with the Capabilities Management team to ensure effective security controls and countermeasures.Managing and developing a team of security professionals by hiring, managing performance, setting individual and team goals, and developing skills and career arcs.Working with cross-functional peer groups such as Enterprise Risk, Legal, IT, Finance, Advancement, Infrastructure Foundations, and others in the Foundation to define and execute strategies for addressing security and privacy concerns.Initiatives to maintain security as related to software design, development, documentation, and release.Practices to ensure the privacy, security, and integrity of data throughout the collection, access, analysis, release, and retention processes.Supporting the enterprise risk function in compliance and audit for GDPR, PCI DSS, and other applicable regulations.Working closely with the Foundation and our volunteer community to cultivate an affirmative and proactive culture that ensures security and privacy efforts are baked into the ways we share free knowledge with the world.Defining and setting priorities and roadmaps for the product security and privacy teams.Skills & Experience: Experience managing, establishing, creating, and deploying security and privacy efforts at a complex organization.
#J-18808-Ljbffr