Senior Director Product Management, Security, Compliance and Risk

Key Responsibilities

• Define long-term product security, compliance & risk enablement strategy aligned with enterprise technology and business objectives;
• Serve as the single technology intake point for compliance, security and risk requirements impacting products and technology platforms;
• Create and maintain product security, compliance & risk enablement roadmap with clear prioritization criteria, balancing regulatory and security requirements against business impact, delivery capacity and technical feasibility;
• Translate requirements into implementation ready technical expectations, including documentation and user stores, based on requirements defined by Legal, Privacy, Cyber and Risk;
• Normalize and consolidate requirements across Legal, Privacy, Cyber, Risk and audit to prevent duplication, misalignment or conflicting implementation expectations;
• Ensure security, compliance & risk driven work is planned intentionally and embedded into roadmaps, rather than introduced as late stage delivery interruptions;
• Apply risk-based prioritization to balance regulatory urgency, product strategy, and delivery capacity across portfolios;
• Guide teams on architectural considerations and solution approaches for addressing requirements; partner closely with technology teams to understand any constraints and inform build vs. buy decisions for solutions without owning implementation;
• Promote use of approved design patterns, shared services, and platform capabilities to enable consistent and scalable secure by design outcomes;
• Partner with technology teams to ensure security & compliance requirements are prioritized and embedded into CI/CD standards and expectations enabling secure and compliant by design delivery at scale;
• Drive clarity on ownership, sequencing and cross team dependencies to support effective execution;
• Escalate prioritization conflicts and delivery risks with clear options, tradeoffs and recommendations for executive decision making;
• Track progress of compliance driven initiatives across products and platforms and surface systemic gaps or risks;
• Provide CIO with clear visibility into what is required, what is prioritized, what is at risk and why, enabling informed decision making.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Engineering or a related field;
• Technical required;
• Formal training in product management, enterprise architecture or technology governance a plus;
• 12-15 years in senior technology leadership, product governance, platform enablement, or large-scale delivery oversight;
• Demonstrated experience translating security, privacy, legal and regulatory requirements into prioritized technology work;
• The following skillsets are required: FedRamp, FISMA, GDPR and Cybersecurity and Compliance, Vulnerability Management, Red Team, AI Security, Pen Testing, SOC\SOX, Identity Management;
• Proven experience in driving prioritization and roadmap alignment across multiple product and engineering teams;
• Experience building AI tools and/or agents, including embedding AI experiences into existing products;
• Strong understanding of secure by design and compliant by design principles within CI/CD pipelines, modern SDLCs and platform environments;
• Ability to influence without authority in complex, matrixed organization;
• Executive level communications and stakeholder management skills;
• Leverages technology to deliver innovative and resilient solutions that enable both near term and long-term value;
• Identifies and resolves complex problems to deliver outcomes while mitigating product risks;
• Collaborates with cross functional teams to solve customer problems and drive organizational alignment.