<img src="https://dmscdn.successfactors.com/27c0a91770d9ecac9ed08a9f63f401a6121aa728d77960676d754d492bcae147/static_content/77526a33984e424982f2/HIDBanner.png" alt="" width="780" height="130"> An Amazing Career Opportunity for a Director Supply Chain Security!! Location: Remote (US & Europe) Job ID: 47557 As part of the Product Security and Privacy team, you will own and lead the corporate-wide Product Supply Chain Security program. You will lead a team that will establish and operationalize the standards, policies, and technical capabilities required to ensure the integrity, security, and trustworthiness of software from development through build, distribution, and deployment across a diverse portfolio of products and environments. Accountable for the consistency, scalability, and defensibility of supply chain security practices, you will ensure that controls are not only defined but effectively implemented and enforced in partnership with IT and Information Security teams. You will operate at a strategic level, building and leading a team responsible for securing source code, build systems, third-party components, and deployment environments, while enabling product teams to adopt secure-by-design practices through standardized architectures and processes. Who are we? HID powers the trusted identities of the world’s people, places, and things, allowing people to transact safely, work productively and travel freely. We are a high-tech software company headquartered in Austin, TX, with over 4,500 worldwide employees. Check us out here: <a href="https://www.hidglobal.com/" target="_blank" rel="noopener">www.hidglobal.com</a> and <a href="https://youtu.be/23km5H4K9Eo" target="_blank" rel="noopener">https://youtu.be/23km5H4K9Eo</a> As our Director Supply Chain Security, you’ll support HID’s success by: <ul style="margin-top:5.0pt;margin-bottom:0.0in"> <li style="margin:5.0pt -15.0pt 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Defining and maintaining the enterprise Supply Chain Security framework, including policies, standards, and processes governing source code, building systems, artifacts, and deployment environments.</li> <li style="margin:5.0pt -15.0pt 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Establishing and enforcing standards for secure storage, accessing, and transferring of source code, including repository protections, branching controls, and access governance.</li> <li style="margin:5.0pt -15.0pt 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Defining and maintaining the enterprise Supply Chain Security framework, including policies, standards, and processes governing source code, build systems, artifacts, and deployment environments.</li> <li style="margin:5.0pt -15.0pt 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Establishing and enforcing standards for secure storage, accessing, and transferring of source code, including repository protections, branching controls, and access governance.</li> <li style="margin:5.0pt -15.0pt 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Defining security requirements for CI/CD pipelines and building environments, including isolation, hardening, least-privilege access, and protection against tampering.</li> <li style="margin:5.0pt -15.0pt 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Defining and operationalizing software provenance and traceability requirements to ensure the authenticity and integrity of software throughout the lifecycle.</li> <li style="margin:5.0pt -15.0pt 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Establishing processes and standards for evaluating and managing third-party vendors, suppliers, and open source components, including security assessment and ongoing risk monitoring.</li> <li style="margin:5.0pt -15.0pt 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Defining and enforcing SBOM requirements, including generation, storage, and usage in vulnerability and compliance processes.</li> <li style="margin:5.0pt -15.0pt 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Coordinating with operations and manufacturing teams, establishing security standards and validation processes for manufacturing, factory, and deployment environments where software is integrated into products.</li> <li style="margin:5.0pt -15.0pt 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Defining and governing the secure management of secrets, keys, and cryptographic material used in development and build systems, in coordination with enterprise security teams.</li> <li style="margin:5.0pt -15.0pt 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Partnering with IT and Information Security teams to ensure supply chain security controls are implemented, monitored, and enforced across development and build environments.</li> <li style="margin:5.0pt -15.0pt 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Collaborating with Product Security and Privacy Architects to embed secure coding and security controls into building environments and CI/CD pipelines through standardized “paved road” solutions.</li> <li style="margin:5.0pt -15.0pt 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Establishing mechanisms to validate control effectiveness and detect non-compliance or drift across pipelines, build systems, and artifact repositories.</li> <li style="margin:5.0pt -15.0pt 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Developing metrics, reporting, and dashboards to measure supply chain security posture, control coverage, and adherence across the organization.</li> <li style="margin:5.0pt -15.0pt 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Providing executive-level reporting and insights on software supply chain risk and control effectiveness.</li> <li style="margin:5.0pt -15.0pt 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Leading audit and assessment readiness for supply chain security controls and ensure alignment with regulatory requirements, including the EU Cyber Resilience Act (CRA).</li> <li style="margin:5.0pt -15.0pt 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Building and leading a team responsible for supply chain security architecture, tooling, governance, and operational coordination.</li> <li style="margin:5.0pt -15.0pt 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Acting as the central authority for software supply chain security across the organization.</li> <li style="margin:5.0pt -15.0pt 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Establishing a scalable, federated operating model enabling product teams to securely develop, build, and deploy software while adhering to centralized standards.</li> <li style="margin:5.0pt -15.0pt 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Partnering with Engineering, DevOps, Product Security, Legal, Procurement, and Compliance teams to ensure consistent adoption and execution of supply chain security practices.</li> <li style="margin:5.0pt -15.0pt 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Ensuring consistent implementation of supply chain security controls across a large and diverse product portfolio and multiple technology domains.</li> <li style="margin:5.0pt -15.0pt 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Providing strategic direction for continuous improvement of supply chain security capabilities, including tooling, processes, and organizational practices.</li> <li style="margin:5.0pt -15.0pt 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Supporting regulatory audits, customer inquiries, and internal assessments related to software supply chain security.</li> </ul> Your Experience and Background include: <ul style="margin-top:0.0in;margin-bottom:0.0in"> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Experience designing, building, or leading software supply chain security, DevSecOps security, or related programs within a product security or application security context.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Strong understanding of software development lifecycles, CI/CD pipelines, and build systems.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Experience defining and implementing security controls for source code management, build environments, and software artifact handling.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Working knowledge of software supply chain security frameworks and concepts (e.g., SLSA, SBOM, software provenance).</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Experience with code signing, cryptographic principles, and secure key management practices.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Experience collaborating with IT and Information Security teams to implement and enforce security controls.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Familiarity with regulatory requirements related to product and supply chain security, such as the EU Cyber Resilience Act (CRA).</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Strong ability to define scalable policies, standards, and governance models across large organizations.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Excellent communication skills with the ability to translate complex technical risks into business impact.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Experience operating in large-scale, multi-product environments with distributed engineering and DevOps teams.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Experience implementing or managing SBOM programs and third-party/open source risk management processes is preferred.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Experience securing cloud-native and containerized development environments is preferred. </li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Experience with manufacturing, embedded systems, or factory deployment environments is preferred.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Experience with Agile/SAFe methodologies is preferred.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Experience building and leading high-performing security teams is preferred. </li> </ul> What we can offer you: <ul style="margin-top:0.0in;margin-bottom:0.0in"> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Competitive salary and rewards package</li> </ul> <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:12.0pt;font-family:Calibri, sans-serif">Competitive benefits and annual leave offering, allowing for work-life balance</li> </ul> <ul style="margin-top:0.0in;margin-bottom:0.0in"> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">A vibrant, welcoming & inclusive culture </li> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Extensive career development opportunities and resources to maximize your potential</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">To be a part of a global organization that is pioneering the hardware, software and services that allow people to confidently navigate the physical and digital worlds</li> </ul> Why apply? <ul style="margin-top:0.0in;margin-bottom:0.0in"> <li style="margin:0.0in 0.0in 0.0in 48.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Empowerment: You’ll work as part of a global team in a flexible work environment, learning and enhancing your expertise. We welcome an opportunity to meet you and learn about your unique talents, skills, and experiences. You don’t need to check all the boxes. If you have most of the skills and experience, we want you to apply.</li> <li style="margin:0.0in 0.0in 0.0in 48.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Innovation: You embrace challenges and want to drive change. We are open to ideas, including flexible work arrangements, job sharing or part-time job seekers. </li> <li style="margin:0.0in 0.0in 0.0in 48.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Integrity: You are results-orientated, reliable, and straightforward and value being treated accordingly. We want all our employees to be themselves, to feel appreciated and accepted.</li> </ul> The wage range for this role considers a broad scope of factors that are considered when making compensation decisions, including but not limited to: skill sets, experience and training, licensure and certifications, and other business and organizational needs. The disclosed range does not account for geographic differentials based on the location where the position may be filled. At HID, it is uncommon for individuals to be hired at or near the top of the range. Final compensation decisions depend on the specific facts and circumstances of each case. The base salary in the United States is $230,000 to $250,000. This opportunity may be open to flexible working arrangements. HID does not accept unsolicited resumes from headhunters, recruitment agencies, or fee-based recruitment services. We are not responsible for any fees related to unsolicited resumes. HID is committed to building a diverse, equitable, and inclusive workforce that reflects the global communities we serve. As an equal opportunity employer, we welcome applications from individuals of all backgrounds, experiences, and perspectives. We evaluate applicants without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, disability, age, veteran status, or any other legally protected characteristic. Our goal is to create a workplace that empowers everyone to thrive and be their authentic selves, fostering an environment of mutual respect and inclusivity. If you have a disability and require assistance or accommodation to participate in the application process or to perform essential job functions, please contact <a href="mailto:[email protected]">[email protected]</a>. Please be aware that our recruitment process may include the use of AI-powered tools to assist in screening applicant resumes. These tools help us efficiently identify candidates whose qualifications and skills align with the job description. We use AI in a responsible manner and in accordance with applicable data privacy laws and regulations. Importantly, all applicants are reviewed by our Talent Acquisition team. AI is used to support, not replace, human judgment in the evaluation process. We make it easier for people to get where they want to go! On an average day, think of how many times you tap, twist, tag, push or swipe to get access, find information, connect with others or track something. HID technology is behind billions of interactions, in more than 100 countries. We help you create a verified, trusted identity that can get you where you need to go – without having to think about it. When you join our HID team, you’ll also be part of the ASSA ABLOY Group, the global leader in access solutions. You’ll have 63,000 colleagues in more than 70 different countries. We empower our people to build their career around their aspirations and our ambitions – supporting them with regular feedback, training, and development opportunities. Our colleagues think broadly about where they can make the most impact, and we encourage them to grow their role locally, regionally, or even internationally. As we welcome new people on board, it’s important to us to have diverse, inclusive teams, and we value different perspectives and experiences. #LI-HIDGlobal

Director, Supply Chain Security (Austin, TX, US, 78753) @ ASSA ABLOY AB

About this role

Ready to apply?