Senior Product Manager – Security Insights & Governance

We are seeking a Senior Product Manager toown a core set of securityinsightsand governance capabilities within the platform.

Security teamsoperateunder constant pressure from compliance mandates, audits, and business leaders. Yet the hardest part of staying compliantisn’timplementing thecontrols,it’sknowing whether those controls are effective. Security,operationsand compliance data is fragmented across tools, reporting is manual and fragile, and leaders are left questioning whether the results they see areaccurate, complete, and up to date.

In this role, you will own a core set ofsecurity measurement and governance capabilitieswithin the platform, defining how security controls are measured,how those measures are represented and governed,and how gaps are prioritized andoperationalized through reporting, workflows, and remediation. Your work turns fragmented data into trusted insights that security leaders and compliance teams rely on to make decisions every day.

You will be accountable for delivering capabilities that support cybersecurity continuous controlsmonitoring(CCM), whilelayingthe foundation for broadersecurity governance and future exposure management use cases. You will work directlywith customers and go-to-market teams todemonstratevalue, support customer acquisition, and drive daily adoption.The capabilities you build also feed AI-driven insights and workflows, enabling intelligentinsightsand remediation across the product.  

Core Responsibilities

• End-to-end ownership ofsecurityinsightsand governancecapabilities within the platform including:

• Definition and representation of security measures (what is measured, how, and why)

• Continuous evaluation of security control effectivenessacross domains and frameworks

• A reporting and insights building experience (metrics, widgets, reusable components) used by customers to intuitively build reports to easily understand gaps and communicate control effectiveness 

• Expansion of compliance framework mappings(NIST, CIS, PCI,etc), including driving which frameworks to support and how controls map to real security measures

• Workflows that allow teams to select a control, understand how it is measured, and review supporting evidence

• Point-in-time snapshots and internal-based views to supportingexecutive reporting and auditswithhistorical comparisons

• Data lineage, change detection, and dependency awareness to explain how and why control status changes over time

• Remediation workflows and automationthat close the loopbetween measured gaps and resolution

• Defining what makes control effectiveness trustworthyfor reporting and AIincluding:

• Data accuracy, completeness, and freshness

• Clear, explainable logic behind results

• Outputs that are defensible under scrutiny

• Definingand buildingthe gold-standardsecuritydata sets thatensure accuracy and consistency, andreuse across:

• Reporting insights

• Workflows

• AIinsights

• Ensuringmeasures, reporting, and workflows are AI-ready, feeding AI-driven insight generation and remediation recommendations

• Partnering with engineering in a continuous-delivery environment to ship enterprise-ready capabilities

• Working with GTM teams to ensure capabilities are clear, outcome-driven, and demo ready

• Engaging directly with customers and prospects tosupport deal cycles and net-new customer acquisition

• Occasional travel to customer sites and team events, typically less than 25%.

• Collaborate with global teams and adjust working hours as needed to accommodate international time zones.

What Success Looks Like in the First 6-12 Months

• Deliver ameasurement-drivenreporting and insights-building experience used daily by core personas

• Expand and operationalizeadditionalsecurity andcompliance frameworks based on customer and market needs

• Launch workflows that improve control transparency, traceability, and audit readiness

• Introduce point in time snapshots that support audits and executive reporting

• Establish data lineage and change-detection capabilities thatsignificantly increasetrust in control effectiveness

• Integrate key governance and remediation workflows with our AI insights engine

• Drive measurable adoptionandcontributedirectlyto net-new customeracquisition

Desired Skills and Experience:

• 5-8+ years of product management experience in B2B SaaS

• Experience in buildinginsight-driven,measurement-heavy, or governance-focused platformsincludingcybersecurity,compliance, AI, orGRC products

• Strongunderstandingfor how metricsaredefined, represented, and consumed for decision-making

• Proven ability to translate securityor governanceproblems into clear product capabilities

• Comfort owning high-visibility product areas used by security leaders and teams

• Experience working with complex, imperfect enterprise datafrom hundreds ofenterprise security tools

• Willingness and ability to engage directly with customer acquisition and expansion efforts

Skills:

• Product experience inbuildingsecurity, CCM, GRC,or exposure-management platforms

• Compliance framework modeling and control mapping

• Reporting and insight-building design

• Risk-based prioritization and gap management

• AI productfluency,designing data outputs that AI can reason over

• ITSM-driven remediation workflows and automation design

• Deliveringsecurity and governanceinsightsbacked bytrusted datawithattributes such as accuracy, completeness, lineage

• Developing clear product requirements, trade-off decision making, and execution

• Cross-functional leadership and outstanding communication

• Customer-facing product storytelling and sales support

Employees at all levels are expected to:

• Understand our Operating Principles; make them the guidelines for how you do your job.