Facebook pixel

Director of Product Security
Posted on 10/7/2022
Experience Level
Desired Skills
  • Experience managing, establishing, creating, and deploying security and privacy efforts at a complex organization
  • CISSP, CEH, GWEB, CASS, and/or CSSLP certification is highly desirable
  • Experience with software product security at a high traffic or high risk internet site is highly desirable
  • 5+ years of progressive management experience
  • 10+ years of applicable security practitioner experience
  • Experience with a broad range of security services and disciplines
  • Bachelor's degree in a related field or the equivalent in work experience
  • Experience with open source or open knowledge communities
  • Experience as a contributor in the Wikipedia or Wikimedia project communities
  • The global product security program, consisting of, but not limited to, the following domains: Application Security Engineering, Threat Intelligence, Vulnerability Management, Security Incident Response, Privacy Engineering, Pen Testing, and Capabilities Management
  • Providing strategy, leadership, staffing and budgetary requirements across a portfolio of security services in the above domains
  • Ensuring the privacy, security, and integrity of our software products
  • Leading the collaborative creation and maintenance of product and platform security policy
  • Educating staff and volunteer technical contributors in secure software engineering practices
  • Evaluating current capabilities in conjunction with the Capabilities Management team to ensure effective security controls and countermeasures
  • Managing and developing a team of security professionals by hiring, managing performance, setting individual and team goals, and developing skills and career arcs
  • Work with cross-functional peer groups such as Enterprise Risk, Legal, IT, Finance, Advancement, Infrastructure Foundations and others in the Foundation to define and execute:
  • Strategies for addressing security and privacy concerns
  • Initiatives to maintain security as related to software design, development, documentation, and release; and
  • Practices to ensure the privacy, security, and integrity of data throughout the collection, access, analysis, release, and retention processes
  • Supporting the enterprise risk function in compliance and audit for GDPR, PCI DSS, and other applicable regulations
  • Working closely with the Foundation and our volunteer community to cultivate an affirmative and proactive culture that ensures security and privacy efforts are baked into the ways we share free knowledge with the world
  • Defining and setting priorities and roadmaps for the product security and privacy teams
Wikimedia Foundation

501-1,000 employees

Nonprofit charitable organization
Company Overview
The mission of the Wikimedia Foundation is to empower and engage people around the world to collect and develop educational content under a free license or in the public domain, and to disseminate it effectively and globally.