Director, Global Investigations & Intelligence

General Information

Job Name

Director, Global Investigations & Intelligence

Country/Region

United States of America

State

California

City

Milpitas

Work Location

Milpitas Office

Work Mode

Employees work on-site

Salary Range

$172,800.00 - $293,800.00

Exemption Status

Exempt

Business Function

Security Operations

Employment Type

Full-time

Sandisk understands how people and businesses consume data and we relentlessly innovate to deliver solutions that enable today’s needs and tomorrow’s next big ideas. With a rich history of groundbreaking innovations in Flash and advanced memory technologies, our solutions have become the beating heart of the digital world we’re living in and that we have the power to shape.

Sandisk meets people and businesses at the intersection of their aspirations and the moment, enabling them to keep moving and pushing possibility forward. We do this through the balance of our powerhouse manufacturing capabilities and our industry-leading portfolio of products that are recognized globally for innovation, performance and quality.

Sandisk has two facilities recognized by the World Economic Forum as part of the Global Lighthouse Network for advanced 4IR innovations. These facilities were also recognized as Sustainability Lighthouses for breakthroughs in efficient operations. With our global reach, we ensure the global supply chain has access to the Flash memory it needs to keep our world moving forward.

Description

Sandisk is building a world-class, intelligence-led Global Security organization. The Director, Global Investigations & Intelligence is a newly created senior leadership role reporting to the Vice President, Chief Security Officer, and is accountable for protecting the safety and wellbeing of Sandisk employees, executives, visitors and operations worldwide.

This leader will design, build and run two integrated global capabilities:

· Investigations & Threat Management. A global investigations program with a core focus on workplace violence prevention and behavioral threat assessment and management (BTAM), delivering consistent, defensible, trauma-informed and legally compliant handling of threats, concerning behavior and security-related misconduct.

· Intelligence. A global intelligence program spanning (1) Corporate Security Intelligence, which identifies, assesses and communicates risks to Sandisk people, sites, operations, events and key stakeholders; and (2) Protective Intelligence, which delivers executive threat and risk management in direct support of Executive Protective Services.

The ideal candidate is a seasoned investigator and intelligence leader with a former law enforcement background (federal, state or local) who has successfully translated public-sector investigative and intelligence tradecraft into a global corporate environment. This role will be a trusted advisor to the CSO, senior leadership, and partners in Human Resources, Employee Relations, Legal, Ethics & Compliance, and beyond.

Key Responsibilities

1. Program Leadership and Strategy

· Build and lead the global Investigations & Intelligence function, including vision, charter, operating model, decision rights, service catalog, staffing plan, budget and multi-year roadmap aligned to the CSO's Global Security strategy.

· Recruit, develop and lead a high-performing, diverse team of investigators, threat managers and intelligence analysts across regions; manage specialized external partners (threat assessment practitioners, forensic psychologists, investigative firms, intelligence providers) with clear SLAs and quality standards.

· Author and maintain global policies, standards and procedures for investigations, threat management and intelligence, aligned with recognized practice such as the ANSI/ASIS/SHRM Workplace Violence Prevention and Intervention standard, ISO 37008 (internal investigations), ASIS investigations guidelines and ATAP/NTAC behavioral threat assessment principles.

· Serve as a key advisor to the CSO on emerging threats, program maturity, risk posture and investment priorities; contribute to executive and board-level reporting.

· Drive closure of internal audit and external assessment findings related to investigations, workplace violence, threat assessment and executive security.

2. Workplace Violence Prevention and Threat Management

· Own the global Workplace Violence Prevention (WVP) and Behavioral Threat Assessment and Management program end to end: intake, triage, assessment, management, monitoring and case resolution.

· Establish and chair a cross-functional Threat Assessment and Management Team (Threat Working Group) with HR/Employee Relations, Legal, Ethics & Compliance, Employee Assistance/Wellbeing, Communications and site leadership, with defined escalation thresholds and decision rights.

· Lead and direct assessments of threats and concerning behavior (internal and external), including domestic or intimate partner violence spilling into the workplace, stalking, harassment, grievance-driven and fixated individuals, and threats made through digital channels; apply structured professional judgment tools (e.g., WAVR-21) and engage forensic and mental health professionals as appropriate.

· Develop case management strategies that balance safety, dignity and due process, including protective measures, safety planning, restraining or protective order support, access restrictions, monitoring and coordinated interventions.

· Ensure compliance with jurisdictional requirements, including California Labor Code 6401.9 (SB 553) Workplace Violence Prevention Plan obligations, OSHA general duty expectations and equivalent international requirements; maintain required logs, incident records and training.

· Design and deliver global training and awareness on recognizing and reporting concerning behavior, active assailant preparedness and de-escalation for employees, managers, HR partners, GSOC operators and contract security officers.

· Serve as incident commander or senior advisor for threat-related critical incidents; partner with GSOC and Security Operations on response, post-incident review and lessons learned.

3. Global Investigations

· Direct sensitive, complex and high-profile security investigations globally, including threats and violence, security breaches, theft and loss of company assets and product, physical intrusion, fraud with a physical security nexus, misuse of facilities, and protection of sensitive and proprietary information in coordination with Information Security and Insider Risk partners.

· Establish a single global case management system and investigative standards covering intake, planning, evidence handling and chain of custody, interviews, documentation, report writing, quality review and retention.

· Conduct and oversee investigative interviews (witness, complainant and subject) using non-confrontational, rapport-based methods; ensure findings are objective, well-documented and able to withstand legal, regulatory and litigation scrutiny.

· Operate under the direction of Legal where appropriate to preserve privilege; ensure investigations respect data privacy and employment law across jurisdictions (e.g., GDPR, works council requirements, local labor law) and Sandisk Code of Conduct.

· Build and maintain liaison relationships with federal, state, local and international law enforcement, prosecutors and government agencies; coordinate referrals, evidence sharing and support for prosecutions.

· Partner with Ethics & Compliance, HR and Internal Audit on intake routing and joint investigations so that matters are handled by the right function with clear ownership and no gaps.

4. Corporate Security Intelligence

· Build a global, intelligence-led security program using the intelligence cycle (requirements, collection, analysis, dissemination and feedback), with priority intelligence requirements set with the CSO and key stakeholders.

· Monitor, assess and report on threats to Sandisk people, sites, supply chain nodes, events and business travel, including geopolitical instability, civil unrest, activism and protest, terrorism, crime, natural hazards and health emergencies.

· Produce timely, actionable intelligence products: flash alerts, daily and weekly threat briefs, country and site risk assessments, event and travel risk assessments, and strategic forecasts for senior leadership, using recognized analytic standards and confidence language.

· Lead open-source and social media intelligence (OSINT/SOCMINT) capability with ethical, legally compliant collection guidelines; manage intelligence platforms, threat monitoring tools and third-party data providers.

· Integrate intelligence into GSOC operations to provide a common operating picture, early warning and decision support during incidents and crises; support business continuity, crisis management and travel risk management (aligned to ISO 31030).

5. Protective Intelligence and Executive Threat Management

· Establish and lead the Protective Intelligence function in close partnership with Executive Protective Services, providing continuous threat and risk management for the CEO, executive leadership team, Board members and other designated principals.

· Identify, assess and manage persons of concern and fixated individuals directing interest toward Sandisk executives; maintain protective intelligence case files and coordinate mitigation with EPS, Legal and law enforcement.

· Deliver advance intelligence and risk assessments for executive travel, residences, public appearances, earnings events, shareholder meetings, trade shows and corporate events.

· Monitor executive digital exposure and online threat activity; lead personal information reduction and online privacy programs for principals and their families where appropriate.

· Provide intelligence briefings and threat summaries to executive protection teams, principals and their offices in a discreet, timely manner.

6. Cross-Functional Partnership

This role is a connector across Sandisk. Key partners include:

· Security Operations and GSOC. Joint incident response, threat intake, alarm and event escalation, real-time monitoring and intelligence-driven operations.

· Executive Protective Services. Protective intelligence requirements, principal threat assessments, travel and event security.

· Human Resources and Employee Relations. Threat assessment teams, terminations and separations with elevated risk, employee support, workplace violence training.

· Legal, Ethics & Compliance and Privacy. Privileged investigations, regulatory obligations, data protection, litigation support and policy governance.

· Information Security, Insider Risk and Trade Compliance. Converged cyber-physical investigations, insider threat, IP and trade secret protection, export control matters.

· Employee Assistance and Wellbeing, Communications, Facilities and Real Estate, Supply Chain, Internal Audit, Business Continuity and Crisis Management. Victim support, crisis communications, site hardening, supply chain security and program assurance.

7. Governance, Metrics and Continuous Improvement

· Define and report KPIs and KRIs (e.g., case volume and cycle time, threat case risk levels and outcomes, intelligence product timeliness and stakeholder value, training coverage, audit findings closed).

· Ensure investigative and intelligence activities are ethical, proportionate, legally compliant and documented, with appropriate privacy safeguards and need-to-know controls.

· Benchmark against peer technology and manufacturing companies and industry bodies; mature the program toward a recognized best-in-class standard.

Qualifications

Required

· Bachelor's degree in Criminal Justice, Criminology, Intelligence Studies, Psychology, Security Management, International Relations or related field, or equivalent experience.

· 15+ years of progressive investigations and intelligence experience, including significant prior service in law enforcement (federal, state or local) as an investigator, detective, special agent or intelligence officer, and 5+ years leading investigations or intelligence teams.

· Demonstrated expertise in workplace violence prevention and behavioral threat assessment and management, including leading multidisciplinary threat assessment teams and managing high-risk cases to resolution.

· Proven experience building or leading a corporate security intelligence and/or protective intelligence program supporting executives and a global workforce.

· Expert interviewing, evidence handling, case management and report-writing skills; experience testifying or supporting legal proceedings.

· Strong working knowledge of employment law, privacy and data protection considerations in investigations across multiple countries.

· Exceptional judgment, discretion and integrity in handling highly sensitive and confidential matters; ability to remain calm and decisive in crisis.

· Excellent executive communication skills, with the ability to brief senior leaders concisely and write clear, actionable intelligence products.

· Ability to work on-site in Milpitas, CA, travel domestically and internationally (up to 10%), and support 24/7 on-call escalation.

Preferred

· Advanced degree (MS/MA, JD or MBA) in a relevant discipline.

· Professional certifications such as Certified Threat Manager (CTM, ATAP), Professional Certified Investigator (PCI, ASIS), Certified Protection Professional (CPP, ASIS), Certified Fraud Examiner (CFE) or recognized intelligence analysis credentials, or the ability to attain them.

· Federal law enforcement or intelligence community background (e.g., FBI, U.S. Secret Service, DHS/HSI, Diplomatic Security, NCIS, OSI, CID) or equivalent international service; experience with Joint Terrorism Task Forces, fusion centers or protective intelligence units.

· Corporate security experience at a global technology, semiconductor or manufacturing company with operations across the Americas, Europe and Asia.

· Training in structured professional judgment tools (e.g., WAVR-21) and threat assessment models such as those of the U.S. Secret Service National Threat Assessment Center.

· Experience with OSINT and threat monitoring platforms, investigative case management systems and GSOC operations.

· Experience with insider risk, trade secret and intellectual property investigations, and supply chain security.

Leadership Competencies

· Builder. Stands up new capabilities from the ground up with structure, standards and measurable outcomes.

· Trusted Advisor. Earns credibility with executives, HR, Legal and operations through sound judgment and clear recommendations.

· Calm Under Pressure. Leads decisively through threats, crises and ambiguity.

· Collaborative. Works across functions and cultures; shares information and builds partnerships rather than silos.

· Ethical and People-Centered. Balances safety with dignity, privacy and fairness for all involved.

Compensation & Benefits

• An employee’s pay position within the salary range may be based on several factors including but not limited to (1) relevant education; qualifications; certifications; and experience; (2) skills, ability, knowledge of the job; (3) performance, contribution and results; (4) geographic location; (5) shift; (6) internal and external equity; and (7) business and organizational needs.
• The salary range is what we believe to be the range of possible compensation for this role at the time of this posting. We may ultimately pay more or less than the posted range and this range is only applicable for jobs to be performed in California, Colorado, New York or remote jobs that can be performed in California, Colorado and New York. This range may be modified in the future.
• You will be eligible to participate in Sandisk's Short-Term Incentive (STI) Plan, which provides incentive awards based on Company and individual performance. Depending on your role and your performance, you may be eligible to participate in our annual Long-Term Incentive (LTI) program, which consists of restricted stock units (RSUs) or cash equivalents, pursuant to the terms of the LTI plan. Please note that not all roles are eligible to participate in the LTI program, and not all roles are eligible for equity under the LTI plan. RSU awards are also available to eligible new hires, subject to Sandisk's Standard Terms and Conditions for Restricted Stock Unit Awards.
• We offer a comprehensive package of benefits including paid vacation time; paid sick leave; medical/dental/vision insurance; life, accident and disability insurance; tax-advantaged flexible spending and health savings accounts; employee assistance program; other voluntary benefit programs such as supplemental life and AD&D, legal plan, pet insurance, critical illness, accident and hospital indemnity; tuition reimbursement; transit; the Applause Program, employee stock purchase plan, and the Sandisk's Savings 401(k) Plan.
• Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law.

Additional Information

Sandisk is committed to providing equal opportunities to all applicants and employees and will not discriminate based on their race, color, ancestry, religion (including religious dress and grooming standards), sex (including pregnancy, childbirth or related medical conditions, breastfeeding or related medical conditions), gender (including a person’s gender identity, gender expression, and gender-related appearance and behavior, whether or not stereotypically associated with the person’s assigned sex at birth), age, national origin, sexual orientation, medical condition, marital status (including domestic partnership status), physical disability, mental disability, medical condition, genetic information, protected medical and family care leave, Civil Air Patrol status, military and veteran status, or other legally protected characteristics. We also prohibit harassment of any individual on any of the characteristics listed above. Our non-discrimination policy applies to all aspects of employment. We comply with the laws and regulations set forth in the Equal Employment Opportunity is the Law (https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12.pdf) poster.

Sandisk thrives on the power and potential of diversity. As a global company, we believe the most effective way to embrace the diversity of our customers and communities is to mirror it from within. We believe the fusion of various perspectives results in the best outcomes for our employees, our company, our customers, and the world around us. We are committed to an inclusive environment where every individual can thrive through a sense of belonging, respect and contribution.

Sandisk is committed to offering opportunities to applicants with disabilities and ensuring all candidates can successfully navigate our careers website and our hiring process. Please contact us at jobs.accommodations@sandisk.com to advise us of your accommodation request. In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying.