Senior Director, Product Management – Security, Compliance and Risk

Responsibilities

• Define long-term product security, compliance & risk enablement strategy aligned with enterprise technology and business objectives; develop and communicate product risk vision and communicate to internal stakeholders.
• Serve as the single technology intake point for compliance, security and risk requirements impacting products and technology platforms.
• Create and maintain product security, compliance & risk enablement roadmap with clear prioritization criteria, balancing regulatory and security requirements against business impact, delivery capacity and technical feasibility.
• Translate requirements into implementation‑ready technical expectations, including documentation and user stories, based on requirements defined by Legal, Privacy, Cyber and Risk.
• Normalize and consolidate requirements across Legal, Privacy, Cyber, Risk and audit to prevent duplication, misalignment or conflicting implementation expectations.
• Ensure security, compliance & risk driven work is planned intentionally and embedded into roadmaps, rather than introduced as late‑stage delivery interruptions.
• Apply risk‑based prioritization to balance regulatory urgency, product strategy, and delivery capacity across portfolios.
• Guide teams on architectural considerations and solution approaches for addressing requirements; partner closely with technology teams to understand any constraints and inform build‑vs‑buy decisions for solutions without owning implementation.
• Promote use of approved design patterns, shared services, and platform capabilities to enable consistent and scalable secure‑by‑design outcomes.
• Partner with technology teams to ensure security & compliance requirements are prioritized and embedded into CI/CD standards and expectations, enabling secure and compliant by‑design delivery at scale.
• Drive clarity on ownership, sequencing and cross‑team dependencies to support effective execution.
• Escalate prioritization conflicts and delivery risks with clear options, trade‑offs and recommendations for executive decision making.
• Track progress of compliance‑driven initiatives across products and platforms and surface systemic gaps or risks.
• Provide CIO with clear visibility into what is required, what is prioritized, what is at risk and why, enabling informed decision making.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, Engineering or a related field technical required.
• 12-15 years in senior technology leadership, product governance, platform enablement, or large‑scale delivery oversight.
• Demonstrated experience translating security, privacy, legal and regulatory requirements into prioritized technology work.
• Required skillsets: FedRamp, FISMA, GDPR and Cybersecurity and Compliance, Vulnerability Management, Red Team, AI Security, Pen Testing, SOC/ SOX, Identity Management.
• Proven experience in driving prioritization and roadmap alignment across multiple product and engineering teams.
• Experience building AI tools and/or agents, including embedding AI experiences into existing products.
• Strong understanding of secure‑by‑design and compliant‑by‑design principles within CI/CD pipelines, modern SDLCs and platform environments.
• Ability to influence without authority in complex, matrixed organization.
• Executive level communications and stakeholder management skills.

Core Competencies

Demonstrates expertise in defining and implementing product security, compliance, and risk strategies aligned with business objectives, while effectively communicating with stakeholders. Proficient in translating complex regulatory requirements into actionable technology initiatives and ensuring secure and compliant delivery within CI/CD frameworks.