Director, Product Cybersecurity

Make your mark at the world's largest HVAC company

Daikin Applied is seeking a talented Director, Product Cybersecurity. The Director, Product Cybersecurity is responsible for ensuring frictionless security for DAA products and solutions, ensuring an optimal balance of performance and security. This role will lead the development and execution of cybersecurity strategies, oversee secure product design practices, and manage risk mitigation efforts to safeguard customers, stakeholders, and the company's reputation.

As a key leader, the Director of Product Cybersecurity will work closely with cross-functional teams including product development, engineering, IT, and compliance to integrate robust cybersecurity measures into product roadmaps and ensure alignment with industry standards and regulations. Come be a part of an exciting journey at Daikin Applied, where innovation and excellence drive our every endeavor!

Location: Plymouth, MN - Hybrid or Remote

What you will do:

• Strategic Leadership:




• Define and implement the organization's product cybersecurity strategy and roadmap
• Serve as the subject matter expert on product security trends, threats, and best practices
• Advocate for a frictionless security culture across product development and operations

• Product Security Integration:




• Collaborate with product and engineering teams to embed security into the software development lifecycle (SDLC)
• Establish secure coding practices and conduct security reviews for new and existing products
• Oversee the implementation of security-by-design and privacy-by-design principles

• Risk Management:




• Conduct risk assessments and vulnerability analyses for all products
• Develop and manage threat modeling and risk mitigation plans
• Ensure compliance with industry regulations, standards, and certifications (e.g., 63443, ISO 27001, NIST, GDPR)

• Incident Response:




• Lead the product incident response process for cybersecurity events
• Work with internal teams to identify, investigate, and resolve product security vulnerabilities
• Develop post-incident reports and implement preventative measures.

• Team Leadership:




• Build and lead a team of cybersecurity professionals, fostering growth and technical excellence
• Provide mentorship, guidance, and training to cross-functional teams on security best practices

• Stakeholder Collaboration:




• Partner with legal, compliance, and privacy teams to address regulatory and contractual requirements
• Communicate cybersecurity risks and strategies effectively to executive leadership and external stakeholders

What's in it for you:

• Medical/Dental/Vision coverage, PTO, 401K match, support for community involvement and much more
• The ability to make an impact and shape your career with a company that is passionate about growth
• The support of an organization that believes it is vital to include and engage diverse people, perspectives, and ideas to achieve our best

Minimum Qualifications:

• Bachelors Degree in Computer Science, Cybersecurity, Information Technology, or a related field
• 10+ years of experience in cybersecurity
• 5+ years of people leadership experience focused on product security
• Deep understanding of secure software development, threat modeling, cryptography, and vulnerability management
• Familiarity with industry frameworks such as OWASP, CSA, and MITRE ATT&CK
• Proven experience implementing cybersecurity strategies for SaaS, IoT, or other tech products
• Strong knowledge of regulatory requirements and compliance standards (e.g., GDPR, HIPAA, CCPA)
• Work visa sponsorship is not available for this position

Preferred Qualifications:

• Industry Experience: Demonstrated success in commercial HVAC and controls. Direct experience supporting customer requirements, channel, dealers, and distributors is a plus
• Thought Leadership: Active participation in industry boards, standards committees, panels, and trade organizations; along with contributions through publications, presentations, and thought leadership within the software development community

• Certifications such as CISSP, CISM, CISA, or CSSLP
• Experience with DevSecOps methodologies and tools
• Knowledge of cloud security principles and services (AWS, Azure, Google Cloud)

Daikin Applied offers the following benefits for this position, subject to applicable eligibility requirements:

• Multiple medical insurance plan options + dental and vision insurance
• 401K retirement plan with employer contributions matching 100% of the first 3% of employee contributions and 50% on the next 2% of employee contributions
• Company provided life insurance + optional employee paid voluntary life insurance, dependent life coverage and voluntary accident coverage
• Short term and long-term disability
• 3 weeks of paid time off for new employees + 11 company paid holidays
• Vacation accrues on a monthly basis, unless applicable federal, state and local law requires a faster accrual
• Paid sick time in accordance of the federal, state and local law
• Paid parental leave and tuition reimbursement after 6 months of continuous service

The typical annual base salary for this position ranges from $142,600 - $243,000 (+ 30-35% bonus) in Minnesota. The range displayed represents the pay range for all positions in the job grade which this position falls. Individual base pay will depend on a wide range of factors including your skills, qualifications, experience, and location.

LI-RS1, LI-hybrid