Product Manager, Security & Compliance

About the role

We are seeking a Security & Compliance Product Manager to lead our security and compliance initiatives. This role requires a strong understanding of security, compliance, and regulatory requirements, as well as the ability to translate these into practical, actionable work that supports our business goals.

Responsibilities

• Own Nclusion's security and compliance roadmap, prioritizing the highest-impact initiatives based on business risk and company objectives.
• Lead the planning and execution of company-wide security and compliance programs, including the work required to achieve and maintain key security certifications.
• Translate security, compliance, and regulatory requirements into clear engineering priorities and delivery plans, partnering with Legal and external auditors along the way.
• Drive security governance by developing scalable policies, standards, and processes that support both engineering and the broader business.
• Partner with Security Engineering to improve secure development practices, internal tooling, vulnerability management, and automation.
• Build trusted relationships across every function, helping teams navigate security requirements through partnership and education rather than enforcement, and balancing strong security with an exceptional developer and employee experience.
• Define success metrics, track progress, and communicate status, risks, and tradeoffs to executive leadership.

Requirements

• 6+ years of Product Management experience, or equivalent experience leading complex security, compliance, or technical programs.
• A strong technical background in cybersecurity, with hands-on experience in areas like cloud security, application security, IAM, vulnerability management, or incident response.
• Prior experience as a Security, Infrastructure, DevSecOps, or Software Engineer is highly preferred.
• Experience leading or partnering on security certification and audit efforts, with familiarity with frameworks such as SOC 2, ISO 27001, NIST CSF, or similar.
• Experience leading cross-functional initiatives and translating technical challenges into roadmaps, requirements, and execution plans.
• Exceptional emotional intelligence and a collaborative, low-ego mindset. You build trust quickly, influence without authority, and find solutions that work for both the business and the teams implementing them.
• Strong judgment and product instincts. You balance business goals, engineering investment, and security risk, and you're comfortable executing in ambiguity at a fast-moving startup.

Qualifications

• Master’s degree in Computer Science, Information Systems, Cybersecurity, or a related field.
• Experience with industry-standard security certifications such as SOC 2, ISO 27001, NIST CSF, or similar.
• Experience with cloud platforms and security tools such as AWS, Azure, or Google Cloud.
• Experience with security architecture, threat modeling, and penetration testing.
• Experience with security compliance frameworks and regulations such as GDPR, HIPAA, or PCI-DSS.

Skills

• Excellent communication and collaboration skills.
• Ability to work effectively in a fast-paced, dynamic environment.
• Strong problem-solving and analytical skills.
• Experience with agile methodologies and project management tools.

Benefits and Perks

• 401(k) with a match!
• Medical, dental, and vision insurance.
• Flexible PTO – minimum of 14 days.
• In-office lunch, team events, and culture.

Pay

The base pay range for this role is $190,000 – $220,000 per year.

Schedule

Nomination for full-time employment.