Product Manager (Remote)

What We Do

Product Management within Information Security defines, maintains, and communicates the strategic roadmap for security platforms and capabilities, with a focus on ServiceNow-based solutions. This role partners closely with internal stakeholders across Security Operations, Vulnerability Management, Risk & Compliance, IT, and Engineering to understand business processes, security risks, and operational challenges. The Product Manager identifies opportunities to enhance security posture through platform capabilities, integrations, and workflow automation. Responsibilities include gathering requirements, defining specifications, managing the product roadmap, and ensuring successful delivery of secure, scalable, and efficient solutions within the ServiceNow ecosystem. Acts as the primary liaison between Information Security and technical delivery teams, ensuring solutions align with enterprise security strategy, regulatory requirements, and operational needs. Drives adoption, usability, and continuous improvement of security products and services.

HOW YOU’LL CONTRIBUTE

• Translate Information Security strategy into detailed product and platform requirements, with a focus on ServiceNow modules (e.g., IRM, SecOps, VR, GRC).
• Drive ongoing advancement of the security product roadmap by partnering with internal stakeholders (Security Operations, Vulnerability Management, Risk & Compliance, IT, Engineering) to identify needs, gaps, and opportunities.
• Own and prioritize backlog for ServiceNow enhancements, including updates, integrations, and customizations aligned to security use cases.
• Execute the roadmap by providing clear direction to development and platform teams, ensuring solutions reflect operational feedback, security priorities, and regulatory requirements.
• Define and document end-to-end workflows, data models, and integrations across security tools and enterprise systems.
• Gather and analyze user feedback, operational metrics, and audit findings to continuously improve platform effectiveness and user experience.
• Ensure alignment of product capabilities with security frameworks (e.g., NIST, ISO, CIS) and internal policies.
• Evaluate and recommend enhancements, automation opportunities, and new capabilities to improve efficiency, risk visibility, and response times.
• Partner with engineering teams to design and implement integrations between ServiceNow and security tools (e.g., vulnerability scanners, cloud compliance platforms, identity platforms).
• Define success metrics (KPIs/KRIs) and track performance of security products and workflows.
• Support governance processes including change management, risk assessments, and control validation related to platform updates.
• Act as a subject matter expert for ServiceNow security modules and advocate for best practices in platform configuration and usage.

WHAT YOU’LL BRING

Required Education, Experience, Certification/Licensure

• Bachelor’s degree or equivalent combination of education and experience
• 5+ years of experience in product management, platform management, or security engineering
• Experience working with ServiceNow, preferably in SecOps, Vulnerability Response, IRM/GRC, or related modules

Knowledge, Skills, and Abilities (KSAs)

• Strong understanding of Information Security domains (e.g., vulnerability management, incident response, risk & compliance)
• Experience defining requirements, workflows, and integrations for enterprise platforms
• Ability to translate complex security and technical concepts into clear requirements and actionable plans
• Experience working in cross-functional, highly matrixed environments
• Strong communication skills with the ability to engage technical and non-technical stakeholders
• Analytical and problem-solving skills with a focus on risk-based decision making
• Familiarity with security frameworks and regulatory requirements (e.g., NIST, ISO, SOX)
• Experience with Agile methodologies, backlog management, and sprint planning
• Knowledge of ServiceNow platform capabilities, including configuration, workflows, and integrations
• Ability to influence outcomes, drive alignment, and manage competing priorities
• Project and program management skills

** Note that the following statements only apply to candidates who will be working from an unincorporated area within Los Angeles County.

First American will consider for employment all qualified applicants, including those with arrest or conviction records, in a manner consistent with the requirements of applicable state and local laws (e.g., the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act).

First American intends to conduct a review of an applicant’s criminal history in connection with a conditional offer. First American reasonably believes that a criminal history may have a direct, adverse and negative relationship with the following material job duties for this position potentially resulting in the withdrawal of the conditional offer of employment: handling of confidential, proprietary or trade secret information belonging to First American or its customers, administrating or facilitating financial transactions, and the ability to meet customer-imposed criminal history requirements.

What We Offer

Based on eligibility, First American offers a comprehensive benefits package including medical, dental, vision, 401(k), PTO/paid sick leave and other great benefits like an employee stock purchase plan.