Director, Product Security

TransUnion's Job Applicant Privacy Notice Personal Information We Collect Your Privacy Choices Team Overview The Product Security team embeds secure engineering practices throughout the product lifecycle and partners with product, platform, and engineering leaders to reduce security risk across regulated financial data products. The team enables developers through scalable security controls, reusable capabilities, and practical guidance that improve both security outcomes and engineering efficiency. This role reports to the Sr. Director, Product Security & Architecture. This is a remote position which may require occasional in-person attendance at work-related events at the discretion of management. Role Overview and Core Responsibilities Lead and build a high-performing, hands-on Product Security team responsible for secure software development lifecycle (SSDLC) practices, threat modeling, and product vulnerability management in coordination with Attack Surface Management. Partner with engineering leadership to embed security throughout the software development lifecycle while improving developer productivity and delivery velocity. Define, implement, and maintain product security standards, security guardrails, and required security gates across the product development ecosystem. Drive vulnerability remediation programs, service-level objectives, and vulnerability disclosure workflows in partnership with security and engineering stakeholders. Develop and execute a Product Security maturity roadmap aligned to industry frameworks, including NIST, CIS, PCI, and internal control requirements. Establish and monitor security metrics that measure program effectiveness, security adoption, remediation performance, and risk reduction. Lead and scale a Security Champions program that equips engineering teams with security knowledge, tooling, and best practices. Contribute to the development of reusable security services, controls, frameworks, and software components that support secure product development. Participate in architecture reviews, product reviews, and technology decision-making processes to ensure security requirements are incorporated early in the development lifecycle. Drive measurable outcomes including increased security gate coverage, improved remediation timelines, reduced critical vulnerabilities, and enhanced developer adoption of secure engineering practices. Required Knowledge and Experiences 10+ years of experience in security engineering, application security, or closely related security disciplines, including at least 5 years leading and developing technical teams. Deep expertise in Secure Software Development Lifecycle (SSDLC), secure coding practices, and cloud-native application architectures to establish and enforce secure product development standards across large-scale engineering environments. Demonstrated success influencing product and engineering leadership to drive security outcomes across complex, matrixed organizations. Hands-on software engineering experience with the ability to review, assess, and contribute code in support of secure product development initiatives. Experience implementing and operationalizing security frameworks such as SSDF (Secure Software Development Framework), OWASP SAMM (Software Assurance Maturity Model), SAFECode, or similar industry-recognized frameworks. Required Technical Skills Application Security (AppSec) program leadership and Secure Software Development Lifecycle (SSDLC) implementation. Threat modeling methodologies and secure architecture review practices. Cloud security principles, controls, and architectures for modern cloud-native environments. Security tooling integration within CI/CD (Continuous Integration/Continuous Delivery) pipelines and automated security validation processes. Software development and code review capabilities across modern programming languages, frameworks, and development platforms. We're also looking for the preferred skills below. Whether you are proficient or could use some brushing up, we're happy to support your career development and growth in: Experience in regulated financial services, credit, banking, fintech, or similarly regulated industries. Experience managing vulnerability disclosure programs and Product Security Incident Response activities. Experience building reusable security services, libraries, frameworks, or platform capabilities. Strong understanding of developer experience principles and strategies for reducing friction in secure software delivery. Experience building cross-functional security governance and engineering enablement programs. Benefits that support every part of your life: At TransUnion, we design benefits to help you feel well, do well, and plan well—from day one. For Your Health : Enjoy day-one eligibility for medical, dental, and vision coverage, plus supplemental plan options. Spousal, domestic partner, and other eligible dependent coverage is available on select plans. Choose tax‑advantaged HSA and FSA accounts to make everyday care more affordable. For Your Protection : We’ve got your back with company‑paid basic life and AD&D, optional voluntary life and AD&D for you and your family, and short‑ and long‑term disability. You can also opt into a legal plan, pet insurance, and travel accident coverage. For Your Family : From adoption assistance and fertility planning coverage to caregiver support, we’re here for every chapter. Access Dependent Care FSA for possibility of an employer match, a complimentary Care@Work membership, and up to 12 weeks of paid parental leave with eligibility for a thoughtful, gradual return. For Your Future : Build toward what’s next with our 401(k) with employer match and Employee Stock Purchase Plan (ESPP). Tap financial wellness resources, career coaching, and optional long‑term care insurance to plan confidently. For You : Grow and recharge with tuition reimbursement, flexible time off for exempt employees or paid time off for nonexempt employees, up to 12 paid holidays per year, commuter benefits, employee discounts, charitable gift matching, and paid volunteer time off, plus corporate volunteer events that make it easy to give back. For Your Wellness : Access 24/7 support including professional therapy, coaching, and emotional well‑being programs alongside guided meditation and resources that support physical, mental, social, and financial wellness. We are committed to being a place where diversity is not only present, it is embraced. As an equal opportunity employer, all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability status, veteran status, genetic information, marital status, citizenship status, sexual orientation, gender identity or any other characteristic protected by law. Additionally, in accordance with Section 503 of the Rehabilitation Act of 1973 and the Vietnam Era Veterans’ Readjustment Assistance Act of 1974, TransUnion takes affirmative action to employ and advance in employment qualified individuals with a disability and protected veterans in all levels of employment and develops annual affirmative action plans. Components of TransUnion’s Affirmative Action Program for individuals with disabilities and protected veterans are available for review to any associate or applicant for employment upon request by contacting ERCoE@transunion.com . Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable law, including the Los Angeles County Fair Chance Ordinance for Employers, the San Francisco Fair Chance Ordinance, Fair Chance Initiative for Hiring Ordinance, and the California Fair Chance Act. Adherence to Company policies, sound judgment and trustworthiness, working safely, communicating respectfully, and safeguarding business operations, confidential and proprietary information, and the Company’s reputation are also essential expectations of this position. Pay Scale Information: The U.S. base salary range for this position is $168,750.00 - $281,250 annually. *The salary range for this position reflects a reasonable estimate of the range of compensation for this job. At TransUnion, actual compensation is based on careful consideration of additional factors such as (but not limited to) an individual’s education, training, work experience, job-related skill set, location, and industry knowledge, as well as the scope and responsibilities of the position and market considerations. Regular, fulltime non-sales positions may be eligible to participate in TransUnion’s annual bonus plan. Certain positions may be also eligible for long-term incentives and other payments based on applicable company guidance and plan documents. TransUnion Overview: At TransUnion, we encourage and are committed to creating a real, positive impact and shared sense of purpose within our Workforce for Good , which empowers our people to grow, innovate and contribute to a better future for our communities and customers. We strive to build an environment where our associates are in the driver’s seat of their professional development— while having access to help along the way. We recognize that success comes when our associates thrive both professionally and personally; that’s why we prioritize work/life flexibility and offer resources for our teams across the globe to collaborate and drive excellence. Be a part of our Workforce for Good – you’ll work with great people, pioneering products and cutting-edge technology. TransUnion's Internal Job Title: Director, Infosec Engineering Company: TransUnion LLC