Director, Supply Chain Security

ASSA ABLOY Opening Solutions

. As part of the Product Security and Privacy team, you will own and lead the corporate-wide Product Supply Chain Security program.

Posted 5/6/2026full-timeRemote • Texas • 🇺🇸 United StatesLead💰 $230,000 - $250,000 per yearWebsite

Tech Stack

Tools & technologies

CloudOpen Source

About the role

Key responsibilities & impact

As part of the Product Security and Privacy team, you will own and lead the corporate-wide Product Supply Chain Security program.
You will lead a team that will establish and operationalize the standards, policies, and technical capabilities required to ensure the integrity, security, and trustworthiness of software from development through build, distribution, and deployment across a diverse portfolio of products and environments.
Accountable for the consistency, scalability, and defensibility of supply chain security practices, you will ensure that controls are not only defined but effectively implemented and enforced in partnership with IT and Information Security teams.
You will operate at a strategic level, building and leading a team responsible for securing source code, build systems, third-party components, and deployment environments, while enabling product teams to adopt secure-by-design practices through standardized architectures and processes.

Requirements

What you’ll need

Experience designing, building, or leading software supply chain security, DevSecOps security, or related programs within a product security or application security context.
Strong understanding of software development lifecycles, CI/CD pipelines, and build systems.
Experience defining and implementing security controls for source code management, build environments, and software artifact handling.
Working knowledge of software supply chain security frameworks and concepts (e.g., SLSA, SBOM, software provenance).
Experience with code signing, cryptographic principles, and secure key management practices.
Experience collaborating with IT and Information Security teams to implement and enforce security controls.
Familiarity with regulatory requirements related to product and supply chain security, such as the EU Cyber Resilience Act (CRA).
Strong ability to define scalable policies, standards, and governance models across large organizations.
Excellent communication skills with the ability to translate complex technical risks into business impact.
Experience operating in large-scale, multi-product environments with distributed engineering and DevOps teams.
Experience implementing or managing SBOM programs and third-party/open source risk management processes is preferred.
Experience securing cloud-native and containerized development environments is preferred.
Experience with manufacturing, embedded systems, or factory deployment environments is preferred.
Experience with Agile/SAFe methodologies is preferred.
Experience building and leading high-performing security teams is preferred.

Benefits

Comp & perks

Competitive salary and rewards package
Competitive benefits and annual leave offering, allowing for work-life balance
A vibrant, welcoming & inclusive culture
Extensive career development opportunities and resources to maximize your potential

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

software supply chain securityDevSecOps securitysecurity controlssource code managementCI/CD pipelinesbuild systemscode signingcryptographic principlessecure key managementSBOM programs

Soft Skills

leadershipcommunicationpolicy definitionscalabilitygovernancecollaborationstrategic thinkingrisk translationteam buildingproblem solving