Senior Product Manager GRC Automation

Benefits:

401(k)

Dental insurance

Health insurance

Opportunity for advancement

Paid time off

Training & development

Vision insurance

Summary

Our Federal client in Washington, DC is seeking a highly experienced Senior Product Manager to lead the definition, implementation, and management of processes related to compliance, policy, outreach, and privacy. This role is central to automating Governance, Risk, and Compliance (GRC) functions.

Key Responsibilities

Strategy & Requirements: Elicit and synthesize requirements from both technical and non-technical stakeholders to inform the product strategy and prioritization of GRC initiatives.

Policy Enablement: Enhance the organizational understanding and accessibility of policy and process requirements.

Product Definition: Translate regulatory requirements, policies, and stakeholder needs into precise product/process requirements and user stories.

Roadmapping: Develop and execute product roadmaps for GRC automation tools, driving quantifiable improvements in efficiency and risk mitigation.

Backlog Management: Own and prioritize the team's backlog, ensuring a balance between immediate operational needs and long-term strategic objectives.

Continuous Compliance: Collaborate closely with engineering and delivery teams to integrate security and privacy controls directly into Agile and DevOps workflows, facilitating continuous compliance.

Stakeholder Engagement: Maintain transparent communication, alignment, and visibility on the product roadmap and outcomes across all stakeholder groups.

Process Improvement: Measure the impact of process changes and leverage data and feedback to drive continuous improvement in processes and services.

Qualifications

Experience: Minimum of 5 years in Product Management, with at least 2 years specifically focused on working with security, compliance, or risk management teams.

Product Management Skills: Proven track record of gathering requirements, managing product backlogs, and successfully delivering product roadmaps.

Automation: Demonstrated success in streamlining and automating business processes using technology solutions.

Federal Compliance: Strong working knowledge of federal security compliance frameworks (e.g., FISMA, NIST, FedRAMP).

Security & Privacy: Deep understanding of Federal information security principles and privacy regulations.

Methodology: Experience with Agile development methodologies and close collaboration with engineering and DevOps teams.

Communication: Exceptional communication skills with the ability to effectively translate complex security concepts for diverse audiences.

Collaboration: A history of successful cross-functional collaboration and effective stakeholder management.

Flexible work from home options available.