Director, Security Architecture and Product Security

We are Reckitt

Home to the world's best loved and trusted hygiene, health, and nutrition brands. Our purpose defines why we exist: to protect, heal and nurture in the relentless pursuit of a cleaner, healthier world. We are a global team united by this purpose. Join us in our fight to make access to the highest quality hygiene, wellness, and nourishment a right and not a privilege.

Information Technology & Digital

In IT and D, you'll be a force for good, whether you're championing cyber security, defining how we harness the power of technology to improve our business, or working with data to guide the innovation of consumer loved products. Working globally across functions, you'll own your projects and process from start to finish, with the influence and visibility to achieve what needs to be done. And if you're willing to bring your ideas to the table, you'll get the support and investment to make them happen. Your potential will never be wasted. You'll get the space and support to take your development to the next level. Every day, there will be opportunities to learn from peers and leaders through working on exciting, varied projects with real impact. And because our work spans so many different businesses, from Research and Product Development to Sales, you'll keep learning exciting new approaches.

About the role

The IT&D Director - Security Architecture and Product Security will lead our security technology and architecture roadmap to eliminate complexity and accelerate the adoption of innovative, platform-based solutions. The role defines the enterprise security architecture framework and governs the design assurance process and reference architecture. Furthermore, they will orchestrate the Secure Software Development Lifecycle (SSDLC), managing a modern security toolchain (SAST, DAST, SCA) to ensure robust SBOM compliance.

Your responsibilities

Leadership

• As a key member of the Cyber Leadership Team, you will build and scale a high-performing team of Security Architects and Software Security Specialists. You will lead these technical experts as strategic 'Security Partners' who don’t just govern but actively enable the business to innovate securely at pace.

Security Technology Strategy & Platform Transformation

• Lead the multi-year security technology roadmap, intentionally moving from a fragmented landscape toward a Security-as-a-Platform model. Your goal is to reduce "undifferentiated complexity" so the broader Cyber team can focus on high-value activities.
• Act as the primary scout for emerging technologies, specifically driving the adoption of Agentic AI and GenAI within the security stack to automate core cyber processes.

Enterprise Security Architecture & Governance

• Define and maintain the Enterprise Security Architecture Framework, encompassing all reference architectures, security principles, and technical standards e.g. Cloud (Azure/GCP), manufacturing.
• Oversee the formal Security Design Assurance process. Your team of architects will act as the "Security Design Authority," ensuring all new projects meet a standardized set of non-functional security requirements (NFRs) before moving to build.
• Develop and publish "Gold Standard" security patterns that allow product, project and engineering teams to build securely by default without starting from scratch.

Secure Software Development Lifecycle (SSDLC)

• Mandate and govern the global Secure Software Development Lifecycle. You are responsible for ensuring that security is "shifted left"-integrated into the initial requirements and design phases.
• Own the strategy and operational effectiveness of the "Security Toolchain." This includes the integration and tuning of SAST (Static Analysis), DAST (Dynamic Analysis), and SCA (Software Composition Analysis) within the CI/CD pipelines.
• Lead the technical implementation of Software Bill of Materials (SBOM) tracking to ensure transparency and traceability of third-party and open-source components.

Threat Modelling & Technical Consultancy

• Drive a culture of proactive threat modelling across all teams. Your team will facilitate sessions to identify architectural weaknesses and logic flaws in the design phase of high-risk applications.
• Provide high-level broad technical support for complex projects.

The experience we're looking for

• Architectural Leadership at Scale: Proven track record of defining and executing Enterprise Security Architecture.
• Modern Engineering & DevSecOps Expertise: Experience leading Secure Software Development Lifecycles (SSDLC), including the successful integration of automated security tool chains.
• AI & Emerging Tech knowledge: thought leadership on how AI and innovative technology can benefit the Cyber Security function.
• People Leadership skills: Experienced in building and mentoring high-performing, multi-hub technical teams.
• Ability and desire to scale knowledge and learning.
• Strong analytical and consulting skills, rooted in ability to draw and communicate insights from multiple data points.
• Strong verbal and written communication skills, with particular ability to communicate technical information to non-technical senior stakeholders and to listen to identified concerns and adapt accordingly.
• Technical familiarity with securing GenAI and Large Language Model (LLM) platforms, specifically within Azure and Databricks environments, including knowledge of AI-specific threats.

The skills for success

Enterprise Security Architecture, Programme Management, Secure Software Development Livecycle, SSDLC, Digital Strategy, Product Solution Architecture, Data Governance, Product Compliance, Digital Transformation, Stakeholder Relationship Management, Outstanding Communication, stakeholder engagement, Innovation Processes, Innovation, User Experience Design.

What we offer

With inclusion at the heart of everything we do, working alongside our four global Employee Resource Groups, we support our people at every step of their career journey, helping them to succeed in their own individual way. We invest in the wellbeing of our people through parental benefits, an Employee Assistance Program to promote mental health, and life insurance for all employees globally. We have a range of other benefits in line with the local market. Through our global share plans we offer the opportunity to save and share in Reckitt's potential future successes. For eligible roles, we also offer short-term incentives to recognise, appreciate and reward your work for delivering outstanding results. You will be rewarded in line with Reckitt's pay for performance philosophy.

Equality

We recognise that in real life, great people don't always 'tick all the boxes'. That's why we hire for potential as well as experience. Even if you don't meet every point on the job description, if this role and our company feels like a good fit for you, we still want to hear from you. All qualified applicants will receive consideration for employment without regard to age, disability or medical condition; colour, ethnicity, race, citizenship, and national origin; religion, faith; pregnancy, family status and caring responsibilities; sexual orientation; sex, gender identity, gender expression, and transgender identity; protected veteran status; size or any other basis protected by appropriate law.