VP, Product Security

Your Role

The Commercial Product Security organization is responsible for ensuring that security is embedded throughout the lifecycle of Stellarus commercial products, platforms, and technology services. The Vice President, Product Security will establish and lead the enterprise product security strategy, governance framework, and operating model to protect Stellarus commercial products, customer data, and digital ecosystems while enabling innovation and business growth.

This executive leader will partner closely with Product, Engineering, Risk Management, Privacy, Compliance, and Legal business leaders to build secure-by-design capabilities that scale across Stellarus’ portfolio of healthcare technology solutions. The role will oversee product security engineering, application security, cloud security, DevSecOps, vulnerability management, security architecture, and product security governance programs.

Our leadership model is about developing great leaders at all levels and creating opportunities for our people to grow – personally, professionally, and financially. We are looking for leaders that are energized by creative and critical thinking, building and sustaining high-performing teams, getting results the right way, and fostering continuous learning.

Your Work

In this role, you will:

• Establish and execute the enterprise commercial Product Security vision, strategy, and multi-year roadmap aligned with Stellarus business objectives, technology priorities, customer commitments, and product growth strategy.
• Build and lead a high-performing Product Security organization focused on security engineering excellence, scalable product security practices, operational rigor, and measurable risk reduction.
• Partner with Product Management, Engineering, Architecture, Compliance and Platform teams to embed security requirements into the product development lifecycle.
• Drive adoption of secure-by-design and secure-by-default principles across all products, platforms, APIs, cloud services, and technology solutions.
• Define and govern technical product security requirements across authentication, authorization, identity, API security, encryption, key management, secrets management, tenant isolation, secure configuration, logging, abuse prevention, and data protection.
• Oversee application security, cloud security, DevSecOps, software supply chain security, threat modeling, penetration testing, and vulnerability management programs.
• Establish cloud-native product security standards for infrastructure-as-code, containers, Kubernetes, serverless architectures, CI/CD pipelines, cloud identity, network segmentation, workload protection, runtime security, and continuous control monitoring.
• Drive security automation across the software delivery lifecycle, including SAST, DAST, SCA, IaC scanning, container image scanning, secrets detection, SBOM generation, artifact signing, policy-as-code, CI/CD security gates, and automated vulnerability triage.
• Lead security assessments and reviews for new products, strategic initiatives, acquisitions, partnerships, and technology implementations.
• Develop enterprise-wide product security metrics, reporting, and executive dashboards that provide visibility into risk posture, security maturity, and program effectiveness.
• Partner with Legal, Privacy, Compliance, Internal Audit, and Risk Management teams to ensure alignment with applicable regulatory requirements and industry standards.
• Champion security automation and continuous monitoring capabilities that improve efficiency and reduce organizational risk.
• Represent Product Security in executive leadership forums, customer engagements, regulatory discussions, and industry events as needed.
• Foster a culture of security awareness, accountability, and continuous improvement across the technology organization.
• Manage product security budgets, investments, vendor relationships, and strategic initiatives to maximize business value and risk reduction.

Required Knowledge and Experience

• (Bachelor’s degree in Computer Science, Engineering, or a related technical field) or (18+ years of relevant experience (as shown below) in lieu of a degree).
• 12+ years of relevant experience in information security, cybersecurity, product security, application security, cloud security, software engineering security, or related disciplines, with a proven track record of leading enterprise-scale security programs and te…