Director, Solution Security and Compliance
- Compensation
- $135K–$200K
- Location
- Phoenix, Arizona, United States
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 5+ years
- Category
- Not specified
- Posted
Skills
Must have
- 10+ years of dedicated professional experience in enterprise cybersecurity, secure systems engineering, or information risk management, with a clear history of technical mastery.
- Direct experience within the physical security systems, building automation, OR equivalent operational technology (OT) sectors.
- At least 5 years operating in a high-level organizational leadership role (Director or Senior Manager) directly guiding security or compliance programs.
- Solid academic and technical background, preferably rooted in computer engineering, computer science, or an equivalent technical engineering discipline.
- Deep working familiarity with rigorous international security standards and control frameworks (e.g., ISO/IEC 27001/27002, NIST, or equivalent corporate policy suites).
- Extensive experience interpreting secure infrastructure layouts, network segmentation models, identity/access controls, and cryptographic mechanisms.
- Superior communication and diplomatic skills, capable of maintaining high authority while building productive bridges across branches, corporate functions, and customer InfoSec leaders.
Nice to have
- A business management degree or advanced technical degree.
- Advanced experience with physical security systems or building automation systems.
- Recognized executive security credentials such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), or Certified Protection Professional (CPP)
Full description
We are seeking a Director, Solution Security and Compliance to own the strategy, governance, and delivery of our customer-facing cybersecurity and compliance programs. This role serves as the designated Cybersecurity Partner (CSP) for North America, ensuring our customers' systems are robustly architected, implemented, and maintained in a secure manner.
This leadership role has a core mandate to establish a proactive cybersecurity program that strikes a balance between operational agility and rigorous corporate compliance. The leader will ensure the organization remains agile during pre-sales quoting and engineering cycles, while fully meeting the governance requirements outlined in our internal corporate cybersecurity policy framework. Operating adjacent to the leaders of Central Technical Services and Central Engineering and Design, this role works deeply cross-functionally across all branch offices and operational layers in North America.
Key Responsibilities1. Cyber Program and Secure Architectures
- Develop and operationalize a comprehensive, customer facing Cyber Program tailored to building technology solutions, including but not limited to Physical Security, Building Automation, AV systems and the underlying IT/OT infrastructure.
- Establish an architectural evaluation framework to review every proposed customer solution during the presales phase, enforcing robust security by design principles prior to client submission.
- Implement automation and AI solutions within the design and security review workflow to minimize administrative friction, preserving our ability to deliver proposals under time constraints and maintaining our bidding agility.
- Define and enforce standard installation practices and secure baseline configurations to guide field resources and systems integration teams.
- Develop and distribute repeatable hardening checklists for site implementation to guarantee deployed systems are properly secured against common exploit vectors.
- Lead security verification, validation, and comprehensive quality assurance routines across finished installations to confirm alignment with requirements.
2. Compliance, Governance and Reporting
- Monitor, audit, and enforce North American compliance with internal security requirements across all our customer’s systems.
- Act as the primary governance bridge between the Bosch Building Technologies North America business entity and the parent organization's corporate cybersecurity function.
- Own risk reporting, manage regional control gap analyses, and execute management status briefings to executive leadership.
- Maintain strategic veto authority over high-risk technical architectures or deployment models failing to meet acceptable security thresholds.