AI Product Owner — Security Lead

Job Title: AI Product Owner - Security Lead

Location: Remote

Duration: Contract

Role Summary

The AI Product Owner will own the roadmap for security's AI-related products and controls - translating enterprise AI risk, governance, and compliance requirements into backlogs that engineering and architecture teams can execute against. This person is the primary bridge between security leadership, business stakeholders, and the technical delivery team for all AI security initiatives.

Key Responsibilities

• Own and prioritize the product backlog for AI security initiatives (e.g., AI/ML risk assessment tooling, model governance workflows, AI usage monitoring, generative AI guardrails).
• Translate enterprise security, privacy, and regulatory requirements (NIST AI RMF, ISO/IEC 42001, SOC 2, PCI, and applicable retail/data-privacy regulations) into actionable user stories and acceptance criteria.
• Partner with Ulta's security leadership, enterprise AI/data science teams, legal, and risk functions to define product vision and success metrics for secure AI adoption.
• Run sprint planning, backlog grooming, and release reviews with the AI Engineer and AI Architect roles; remove blockers and sequence delivery against business priority.
• Define and track KPIs for AI security posture (e.g., model inventory coverage, risk assessments completed, vulnerabilities remediated, policy adoption).
• Produce roadmap artifacts, status reporting, and executive-ready updates for security and technology leadership.
• Evaluate and help select third-party AI security tooling and vendors in partnership with procurement and architecture.

Required Qualifications

• 5+ years of product owner/product management experience, including 2+ years focused on AI/ML, data platforms, or security products.
• Working knowledge of AI/ML lifecycle risk (model risk, data poisoning, prompt injection, adversarial inputs) and AI governance frameworks (NIST AI RMF, ISO/IEC 42001, EU AI Act awareness).
• Experience working within a cybersecurity or GRC (governance, risk, compliance) organization.
• Strong command of Agile/Scrum delivery, backlog management tools (Jira, Azure DevOps), and stakeholder communication at both technical and executive levels.
• Retail, e-commerce, or consumer-facing enterprise experience is a plus.

Preferred Qualifications

• CSPO/CSM or equivalent Agile certification.
• Security certifications (CISSP, CISM, or Security+) or AI governance credentials (e.g., AIGP).
• Prior experience standing up an AI governance or AI security program from the ground up.