Product Manager, Access Reviews

Every breach, every failed audit, every new hire stuck in onboarding purgatory traces back to the same question: who has access to what — and should they? Identity is where modern companies break. Too much access leaks data. Too little grinds the business to a halt. Lumos is the industry's first Autonomous Identity Platform — software that doesn't just surface access risk, but acts on it. We started with a self-service AppStore and grew into the critical infrastructure connecting apps, identities, and data for GitHub, MongoDB, Mars, Pinterest, Anduril, Intercom, Roku, and Netskope. At the center is Albus, our AI agent for identity — mining roles, approving access, and catching the drift humans miss. You'll ship work that thousands of IT and security teams touch every day. You'll own problems without playbooks, because the category is being redefined in real time — by us. Why Lumos? - Jump on a rocketship. Since launching out of stealth in April 2022, we've grown from 20 to ~130 Alchemists and raised over $65M from a16z, Scale, Neo, Greg Brockman (President at OpenAI), and Phil Venables (CISO at Google). - ⭐ Customers love us — and so does the industry. Named a Strong Performer in the 2026 Gartner Voice of the Customer for IGA — 4. 7/5, with 96% of reviewers saying they'd recommend us. Our customers cut time-to-access by 98%, slash IT tickets by 72%, and eliminate excess privilege at scale. - A culture worth joining. Three years running on Forbes' Top 100 Best Startup Employers in America (2024, 2025, 2026) — measured on culture, retention, growth, and job creation. That's our Alchemists, not our marketing. See what we live by here lumos. com/p/the-anatomy-of-an-alchemist.

OVERALL DESCRIPTION Lumos is making it a joy for companies to manage their apps and identities ✨. Access Reviews is one of our most widely adopted products — the surface where customers prove, to auditors and to themselves, that the right people have the right access. It's used by compliance and IT teams and by the managers who review access on a cycle and want to spend as little time in it as possible. As Product Manager, Access Reviews, you'll own the next chapter: moving reviews from something people complete to something that largely runs itself. Agents configure, scope and run reviews through our API and MCP. AI makes the obvious decisions. Humans step in only where judgment is genuinely required. And the definition of what can be reviewed expands — from applications to identities, policies, and the non-human identities and AI agents now operating inside every enterprise. This is a customer-facing product role with real ownership: strategy, quarterly plan, craft, and outcomes. You'll report to the Head of Product and work closely with engineering, design, and our customer-facing teams. ✨ YOUR RESPONSIBILITIES - Agent-first reviews. Own the agentic core of the product: agents that configure, scope, launch and run reviews via API and MCP, and reviews triggered by events rather than calendars. This is the primary focus of the role. - Autonomous decisioning and reviewer trust. Make AI a trusted teammate — auto-decisioning where the answer is unambiguous, clear reasoning where it isn't, and a review experience people advocate for rather than tolerate. - Expand what can be certified. Take reviews beyond applications: identity-centric reviews, policy reviews, and reviews over non-human identities and AI agents — a governance problem the industry has not yet solved. - Roadmap and quarterly plan. Own the strategy and quarterly gameplan for a critical product surface, and make the trade-offs between new review coverage, agentic depth, and fitting how customers actually operate. - Compliance credibility. Ensure what we ship produces defensible, audit-ready evidence — the product has to hold up in a real audit, not just look rigorous. - Customer and field partnership.