Senior Director, HPS Cyber Security & Compliance

• Req ID: 141757
• Region: Americas
• Country: USA
• State/Province: California
• City: San Jose

General Overview

• Functional Area: Information Technology (ITM)
• Career Stream: IT Risk & Compliance (RAC)
• Role: Senior Director (SDR)
• Job Title: Senior Director, Information Security & Risk Management
• Job Code: SDR-ITM-RAC
• Job Level: Band 14
• Direct/Indirect Indicator: Indirect

Role Overview

We are seeking a high-horsepower Senior Director, HPS Cyber Security & Compliance to serve as the chief security architect and governance authority for our dedicated Product & Engineering IT organization.

Driven by massive market expansion and rapid scaling across advanced hardware, networking, and AI technologies, our division supports 2,500+ global R&D, hardware, software, and AI engineers operating at extreme velocity. This executive role is designed for a forward-thinking security leader who excels at embedding robust, automated security controls directly into fast-moving developer pipelines—ensuring the organization scales rapidly without compromising enterprise security or regulatory compliance.

Working in close partnership with the VP of Engineering IT, global CISO, and executive compliance leadership, you will hold full operational accountability for product and firmware security, perimeter defense, zero-trust architectures, Third-Party Risk Management (TPRM), and IT SOX compliance across North America and Asia design hubs. This role carries high organizational visibility and is explicitly structured as a potential succession pathway to corporate CISO leadership.

Key Responsibilities

• Strategic Security Leadership & High-Velocity Governance

Developer-Centric Security Strategy: Architect and enforce security models (zero-trust access, ThreatLocker allowlisting, automated policy enforcement) that protect enterprise IP while accelerating engineering delivery schedules.

Executive Partnership & CISO Alignment: Act as the primary security authority to engineering division leaders and the corporate CISO, driving strategic alignment and evaluating complex architectural trade-offs.

Enterprise & Regulatory Balance: Maintain dual-alignment with global CISO and global IT compliance leadership to ensure hypergrowth initiatives comply with corporate controls, SOX requirements, and international audit standards.

• Product, Firmware & R&D Lab Defense

Product & Firmware Security: Lead independent security reviews across hardware, firmware, and software product lines, establishing secure supply chain custody, code-signing infrastructures, and Hardware Security Modules (HSMs).

R&D Lab (RDL) & Perimeter Defense: Orchestrate perimeter firewalls, continuous vulnerability scanning, and isolated lab network segmentation across global design centers in North America (Santa Clara, San Jose, Austin, Milpitas, Richardson) and Asia (Taiwan, Shanghai, Penang, Chennai).

AI & Cloud Security Boundaries: Define security architectures and sandboxes for applied AI engineering initiatives (Vertex AI setups, IDE code-completion tools) and hybrid cloud build environments (AWS/GCP).

• GRC, TPRM & Security Operations Leadership

Direct High-Performing Teams: Lead a multi-disciplinary global security and compliance organization—including Managers for IT Security, IT GRC Compliance, Product Security Engineers, TPRM Specialists, and SOX Analysts.

Third-Party Risk & SOX Governance: Oversee Third-Party Risk Management (TPRM) programs, clean room compliance, export controls, and IT SOX controls across internal HPS infrastructure and vendor ecosystems.

Incident Response & SOC Integration: Partner with enterprise SOC and MSSP providers to ensure continuous threat monitoring, incident response escalation, and blast-radius containment.

Candidate Profile & Qualifications

Leadership & Experience

Executive Security Experience: 12+ years of progressive leadership in information security, product security, or IT risk management within fast-scaling technology, hardware, semiconductor, or cloud organizations.

Scaling DNA + Enterprise Rigor: Proven track record in high-velocity tech environments or global hardware/software enterprises where security was delivered as an enabler of engineering speed and organizational scale.

CISO-Caliber Gravitas: Executive presence and technical depth to partner directly with executive stakeholders, principal security architects, and external audit authorities.

Technical Competencies

Product & Developer Security: Deep experience with software supply chain security, code-signing pipelines, HSMs, application security (AppSec), and developer-centric endpoint allowlisting (e.g., ThreatLocker).

Infrastructure & Lab Security: Strong architectural fluency in network segmentation, firewalls, zero-trust jump hosts, container security, and cloud security frameworks (AWS/GCP).

Governance & Audit: Comprehensive knowledge of IT SOX compliance, TPRM frameworks, clean room isolation, export controls (ITAR/dual-use), and global ISO/NIST standards.

Core Attributes

• Solution-Oriented Mindset: A proactive leader whose approach to aggressive engineering timelines is "No, but here is how we achieve your objective safely."
• Thinker & Doer: Ability to author global security strategies while remaining hands-on enough to whiteboard zero-trust topologies with principal engineers.
• Why Apply?
• High-Impact Mandate: Full ownership of security and compliance for a dedicated engineering IT organization powering massive corporate expansion.
• C-Suite Succession Path: Positioned as a key peer and strategic successor candidate to corporate CISO and global IT compliance leadership.
• Scale & Innovation: Drive cutting-edge security architecture within a fast-moving engineering environment backed by the capital and scale of a global industry leader.

Physical Demands

Duties of this position are performed in a normal office environment.

Duties may require extended periods of sitting and sustained visual concentration on a computer monitor or on numbers and other detailed data. Repetitive manual movements (e.g., data entry, using a computer mouse, using a calculator, etc.) are frequently required.

Notes

This job description is not intended to be an exhaustive list of all duties and responsibilities of the position. Employees are held accountable for all duties of the job. Job duties and the % of time identified for any function are subject to change at any time.

Celestica is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws.

This policy applies to hiring, promotion, discharge, pay, fringe benefits, job training, classification, referral and other aspects of employment and also states that retaliation against a person who files a charge of discrimination, participates in a discrimination proceeding, or otherwise opposes an unlawful employment practice will not be tolerated. All information will be kept confidential according to EEO guidelines.

Celestica is an E-Verify employer.