Product Security Manager

About Us

At CNH, we're driven by a clear purpose: we serve and advance the people who feed and build a growing world.

As a global leader in agriculture and construction, we create the equipment, technology, and solutions that help our customers work more productively and sustainably. Our success starts with our people, and we foster a collaborative culture where innovation thrives and every employee has the opportunity to grow.

Grow a Career. Build a Future.

If you're ready to make an impact and build a career with purpose, there's a place for you at CNH.

Job Purpose

You will lead CNH's product security team, with responsibility for securing the embedded software running on connected tractors, sprayers, combines and harvesters as well as the cloud platform and digital services those machines depend on. This is a hands-on technical leadership role with full ownership of the function: you will build and grow a team of cloud and embedded security engineers, own the product security budget and investment roadmap, set security strategy for the product portfolio, and own the global compliance posture that allows CNH products to ship into every market we serve.

Agricultural and construction equipment is now software-defined, connected, and increasingly autonomous — and regulators, dealers, and customers all expect it to be secure. You will be the person accountable for making that true, from the secure boot chain on an ECU through to the APIs and data pipelines that make up CNH's next generation digital platform.

Key Responsibilities

• Lead, grow, and develop a product security team spanning both cloud security and embedded/vehicle security; hire, coach, set objectives, and manage performance and career development
• Oversee regional or functional security posture, maturity, and performance
• Actively grow and manage security education and enablement within product teams. Secure coding training, secure design guidance, security champions programs, and self-service tooling that makes the secure path the easy path
• Drive security incident response preparedness and lead major investigations
• Own the product security operating budget: annual planning, headcount forecasting, tooling and licensing spend, external services (penetration testing, assessments, certification), and training
• Manage security vendors, contracts, and service delivery expectations
• Collaborate with IT, operations, and risk teams to ensure alignment of controls
• Support internal/external audits and regulatory readiness (NIST, ISO, etc.)
• Own the product security strategy and roadmap for connected vehicle and cloud platforms
• Manage multiple concurrent projects and programs across several product lines and release cadences; balance security commitments against engineering delivery timelines and escalate trade-offs clearly
• Define and drive security requirements into the SDLC and CI/CD toolchain: SAST, SCA and dependency scanning, secrets detection, container and image scanning, SBOM generation and artifact signing
• Establish security requirements for the embedded platform, including secure boot, secure and OTA update, key and certificate management, hardware root of trust, debug port and diagnostic access control, and in-vehicle network segmentation.

Experience Required

• Bachelor's degree in Engineering, Computer Science, Cybersecurity, or related technical field (or equivalent experience)
• 8+ years of experience as a security practitioner, with experience in application, product, or embedded security
• 3+ years of direct people leadership experience managing engineers, including hiring, coaching, performance management, and career development
• Experience owning or co-owning an operating budget. Including annual planning, headcount forecasting, and tooling or vendor spend
• Prior experience as a software engineer writing and shipping production code
• Working understanding of both embedded software development and cloud software development, and the ability to reason about security across that full stack
• Experience building and running compliance programs across multiple countries or regions, including translating differing regulatory requirements into a single maintainable process
• Familiarity with common web and cloud security frameworks and practices, including the OWASP Top 10 and secure API design
• Experience with build systems and CI/CD platforms (Jenkins, GitLab CI, GitHub Actions, Azure DevOps, or equivalent) and with integrating security tooling into automated pipelines
• Experience with vulnerability management at scale: intake, triage, risk scoring (CVSS or similar), prioritization, and driving remediation across teams that do not report to you

Preferred Qualifications

• Experience securing connected vehicles, off-highway equipment, automotive, or other safety-relevant cyber-physical systems
• Familiarity with automotive and machinery cybersecurity standards and regulations, such as RED, EU Cyber Resilience Act, NIS2, and relevant regional data protection requirements
• Experience with functional safety concepts (ISO 25119, ISO 26262) and the interaction between safety and security
• Familiarity with cloud and information security frameworks such as ISO 27001, SOC 2, NIST CSF, NIST SSDF, or CIS Benchmarks
• Hands-on background in one or more of: embedded C/C++, Linux/Yocto or RTOS platforms, CAN/ISOBUS or automotive Ethernet, hardware security modules, or firmware reverse engineering
• Experience with penetration testing or red teaming systems
• Experience managing a globally distributed team or working across multiple time zones
• Prior experience in agriculture, construction, telematics, or precision farming domains

Pay Transparency

The annual salary for this role is USD $120,225.00 - $184,345.00 plus any applicable bonus (Actual salaries will vary and will be based on various factors, such as skill, experience and qualification for the role.)

For roles open across multiple locations, the salary range indicated refers to the primary location. If a different location is considered, the applicable salary range will be communicated to candidates prior to the first interview.

What We Offer

At CNH, our people are at the heart of everything we do. That’s why we offer a comprehensive benefits program designed to support your health, well-being, and long-term success. From competitive compensation to flexible work arrangements and opportunities for continuous development, our benefits reflect our commitment to creating an environment where employees feel supported and empowered—both personally and professionally. We believe that when you’re given the tools to thrive, you can drive meaningful impact. At CNH, you’ll not only find the resources to succeed today—you’ll find the foundation to grow a career and build a future.