Product Security Compliance Manager

Quick Facts

• Role: Compliance Assurance Leader (Product Security Compliance Assurance)
• Function: Compliance Operations within a Product Security Office
• Location/Work style: United States remote with periodic travel

Description

Lead the Compliance Operations function responsible for ensuring products and development practices meet applicable cybersecurity, product security, regulatory, and customer security requirements. Manage a team executing a scalable and consistent product security compliance assessment program across the product portfolio, and partner with R&D and business stakeholders to drive consistent product security requirement execution.

Responsibilities

• Lead the Product Security Compliance Assurance program: assessment planning, methodologies, execution, reporting, and continuous improvement
• Manage, mentor, and develop a team of compliance assessors for product security compliance evaluations and evidence reviews
• Establish and continuously improve a scalable, consistent assessment process across the product portfolio
• Oversee compliance assessments, findings, remediation plans, exceptions, and risk acceptance decisions
• Drive regulatory readiness and compliance with product security frameworks and requirements, including EU Cyber Resilience Act (CRA) and CISA SSDF, plus customer security requirements
• Maintain and continuously improve governance frameworks, policies, standards, controls, and risk management processes
• Support vulnerability lifecycle governance and assist with incident response oversight for external vulnerability disclosures
• Partner with R&D, Security Engineering, Quality, DevOps, Product Management, Legal, IT, and other stakeholders to identify and manage product security/compliance risks
• Establish KPIs, dashboards, evidence traceability, audit-readiness practices, and automation initiatives for program efficiency
• Provide reporting to senior and executive leadership on compliance posture, assessment results, risk trends, remediation progress, and attention areas
• Interpret evolving cybersecurity/product security/regulatory requirements into practical controls, assessment criteria, and engineering expectations
• Act as a product security compliance subject matter expert and trusted advisor

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Systems, or related field, or equivalent relevant experience
• Typically 8+ years of relevant experience in cybersecurity, product security, compliance, audit, risk management, or related discipline
• 2+ years of management or team leadership experience
• Policy expertise with strong technical fluency to engage EE/CE/CS R&D teams
• Demonstrated subject matter expertise in product security, cybersecurity compliance, and risk management
• Experience implementing/managing/assessing product security frameworks, security controls, and secure product/software development practices
• Strong understanding of software and product development lifecycles, secure development, vulnerability management, security governance, and risk management
• Experience interpreting cybersecurity/product security regulatory requirements into actionable controls, assessment criteria, or engineering requirements
• Experience managing compliance assessments, findings, remediation activities, evidence, exceptions, and/or risk acceptance processes
• Ability to communicate assessment results, compliance posture, and risk information to senior/executive leadership
• Strong stakeholder management and influencing skills across technical, business, legal, and governance functions
• Demonstrated program management skills and experience creating/improving scalable operating models and processes

Benefits

• Medical, dental and vision
• Health Savings Account
• Health Care and Dependent Care Flexible Spending Accounts
• Life, Accident, Disability insurance
• Business Travel Accident and Business Travel Health
• 401(k) Plan
• Flexible Time Off, Paid Holidays
• Paid Family Leave
• Tuition Reimbursement
• Adoption Assistance
• ESPP (Employee Stock Purchase Plan)
• Restricted Stock Units
• Bonus Program