Senior Director, Product & AI Security

Senior Director, Product & AI Security THE ROLE Reporting directly to the Fortive Chief Information Security Officer, you will be responsible for delivering strategic vision and operational oversight for Product Security and Artificial Intelligence (AI) Security across the enterprise. This role will lead the development and execution of a comprehensive security strategy that embeds secure-by-design principles into software, connected products, firmware, and AI-enabled capabilities. You will work across operating companies, engineering, product management, R&D, legal, and compliance teams to ensure product security, AI security, and secure-by-design controls are integrated throughout the product lifecycle. This leader will define enterprise standards, drive measurable risk reduction, and enable innovation by aligning security controls with business objectives, regulatory expectations, and customer commitments. You will lead, coach, mentor, and develop a high-performing team of product and AI security professionals operating across Fortive and its operating companies. REPORTS TO VP & Chief Information Security Officer at Fortive TEAM Team consists of FTEs, contractors, and third-party security partners supporting product security engineering, AI security engineering, secure development lifecycle, and vulnerability management. WHAT YOU WILL DO Product & AI Security Strategy: Develop and implement a comprehensive product and AI security strategy aligned with business objectives, growth initiatives, and regulatory requirements. Establish enterprise standards for secure software development, AI model security, data protection, and product security risk management. Secure Development Lifecycle (SDLC): Embed security and AI security controls into the full product lifecycle, including requirements definition, architecture, design, development, testing, deployment, and sustainment. Drive consistent adoption of threat modeling, secure coding standards, code scanning, software bill of materials, and vulnerability remediation processes. AI Security & Model Risk: Own the AI security program, including threat modeling and adversarial/red-team testing of AI systems; protection against prompt injection, model exfiltration, and data leakage; AI supply-chain and third-party/foundation-model risk; discovery and management of shadow AI; security of AI-assisted code generation and protection of intellectual property; and secure use of agentic AI, including non-human identities, tool and protocol integrations, and segregation-of-duties controls. Provide risk-tiered security review and recommendations on AI use cases and models, and represent Security on the AI Governance Committee in an advisory capacity, with business owners remaining accountable for use-case decisions. Security Architecture for Products: Define and maintain reference architectures and blueprints for secure software, connected devices, cloud-native platforms, and AI-enabled solutions. Ensure scalability, resiliency, and security by design across products and customer environments. Customer & Regulatory Alignment: Partner with sales, customer success, and legal teams to support customer security reviews, contract requirements, and regulatory obligations. Ensure alignment with global standards and emerging product security and AI regulations, including the EU Cyber Resilience Act and the EU AI Act. Vulnerability & Incident Management: Oversee product vulnerability management processes, coordinated disclosure, penetration testing, and remediation programs, including scheduling and coordination of external penetration testing vendors and assessors. Ensure rapid response and transparent communication for product security incidents. Software Supply Chain & Code Signing: Own software supply chain integrity for products, including code signing, build and release integrity, third-party and open-source component risk, and protection of intellectual property from exfiltration or malicious code insertion. Acquisition Integration: Ensure product and AI security capabilities are scalable and capable of integrating acquired technologies efficiently while maintaining consistent enterprise standards. Automation & Operational Efficiency: Drive automation and efficiency across product security operations, reducing manual effort and cycle times for vulnerability management, security reviews, and reporting while scaling coverage across operating companies. Metrics, Reporting & Continuous Improvement: Establish measurable, OpCo-level product and AI security metrics that operating companies can track and improve over time. Provide regular reporting to executive leadership and the Board on product and AI security risk and program effectiveness, drive accountability, and continuously improve the program. Key Partners: Work in close partnership with AI enablement, governance, risk and compliance, legal, and privacy functions, each of which has distinct accountabilities, to ensure clear decision rights and consistent engagement with operating companies. WHO YOU ARE Minimum of 8 years of executive leadership experience in product security, application security, or AI security. Minimum of 12 years of progressive experience in enterprise information security, software engineering security, or related risk management roles within a large global enterprise. Deep expertise in secure software development, cloud-native architectures, DevSecOps, API security, and modern application security practices. Experience building AI security programs, including model and AI supply-chain risk management, and contributing to cross-functional AI governance within product environments. Demonstrated ability to lead security transformation in environments experiencing organic growth and acquisitions. Experience collaborating with engineering, product management, legal, privacy, and compliance teams to translate security requirements into scalable, practical controls. Strong understanding of global product security and AI regulations (such as the EU Cyber Resilience Act and the EU AI Act), secure coding practices, threat modeling, identity and access management, vulnerability management, and incident response. Industry-recognized certifications such as CISSP, CISM, or equivalent desired. Fortive Corporation Overview Fortive’s essential technology makes the world safer and more productive. We accelerate transformation in high-impact fields like workplace safety, build environments, and healthcare. We are a global industrial technology innovator with a startup spirit. Our forward-looking companies lead the way in healthcare sterilization, industrial safety, predictive maintenance, and other mission-critical solutions. We’re a force for progress, working alongside our customers and partners to solve challenges on a global scale, from workplace safety in the most demanding conditions to advanced technologies that help providers focus on exceptional patient care. We are a diverse team 10,000 strong, united by a dynamic, inclusive culture and energized by limitless learning and growth. We use the proven Fortive Business System (FBS) to accelerate our positive impact. At Fortive, we believe in you. We believe in your potential—your ability to learn, grow, and make a difference. At Fortive, we believe in us. We believe in the power of people working together to solve problems no one could solve alone. At Fortive, we believe in growth. We’re honest about what’s working and what isn’t, and we never stop improving and innovating. Fortive: For you, for us, for growth. We Are an Equal Opportunity Employer. Fortive Corporation and all Fortive Companies are proud to be equal opportunity employers. We value and encourage diversity and solicit applications from all qualified applicants without regard to race, color, national origin, religion, sex, age, marital status, disability, veteran status, sexual orientation, gender identity or expression, or other characteristics protected by law. Fortive and all Fortive Companies are also committed to providing reasonable accommodations for applicants with disabilities. Individuals who need a reasonable accommodation because of a disability for any part of the employment application process, please contact us at applyassistance@fortive.com. Pay Range The salary range for this position (in local currency) is 192,300.00 - 357,700.00. Base pay offered may vary depending on various factors, including, but not limited to: job-related knowledge; skills; experience; and other eligibility factors such as geographic location. The Total Rewards package includes competitive base pay and an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and several programs that provide for both paid and unpaid time away from work.