Director/Principal Platform Product Manager - Platform Governance

FICO; United States; On-site; USD 210,000 - 260,000; Full time

Job summary

FICO is seeking a Director of Platform Governance & Compliance to own the hands-on execution of the governance, risk, and compliance product roadmap. You will translate regulatory requirements into concrete specifications, partner daily with engineering and InfoSec, and ensure administrative and audit capabilities are built right and well-documented in a financial-services regulatory context.

You will lead cross-functional delivery, define telemetry, and drive security and data privacy controls,

Qualifications

• Experience translating policy into product specs and JTBDs.
• Strong governance, risk, and compliance product execution.
• Partner with engineering, InfoSec, and architecture teams.
• Familiarity with financial services regulations and data privacy.

Responsibilities

• Translate regulatory requirements into concrete specifications and JTBDs.
• Own day-to-day platform administration: RBAC/ABAC, multi-tenant access.
• Define telemetry, event-logging, and audit-trail requirements.
• Define data privacy controls in partnership with legal and security.
• Write PRDs, epics, and acceptance criteria covering security, availability, performance under audit.
• Bridge between engineering, InfoSec, and architecture teams.
• Work with GTM and pillar leads to document and leverage governance capabilities.
• Track KPIs and surface risks early.

Skills

Platform PM

Financial services

Enterprise SaaS

Security

Cloud infrastructure

Data engineering

Regulated industries

RBAC/ABAC

MFA

SSO

Encryption standards

API security

PRDs/epics writing

Acceptance criteria

RICE

WSJF

Agile/SDLC

Education

Engineering/CS degree

Job description

As Director, Platform Governance & Compliance, you will own the hands‑on execution of our governance, risk, and compliance product roadmap. In this, you will help translate governance strategy into concrete specifications, partners daily with engineering and InfoSec, and ensure the platform's administration, audit, and control capabilities are built right and documented well - with particular attention to the financial service's regulatory context in which our platform operates.

What You'll Contribute

• Policy-to-Code Translation: Read legal, regulatory, and internal policy requirements and translate them into concrete product specifications and JTBDs - for example, turning a “Right to be Forgotten” mandate into automated data‑deletion pipelines, or a segregation‑of‑duties requirement into maker‑checker workflows.
• Access Governance & Administration Execution: Own the day‑to‑day product execution for platform administration - user and role management, multi-tenant/multi‑SU access, RBAC/ABAC models, and delegated administration - ensuring access stays scoped, auditable, and easy for admins to reason about.
• Auditability & Logging: Define telemetry, event-logging, and audit-trail requirements that support audits and customer security reviews.
• Data Privacy & Protection: Define requirements for data privacy controls, field- and attribute-level access, encryption at rest and in transit, and data lifecycle management, in partnership with legal and security teams.
• Technical Documentation: Write clear PRDs, epics, and acceptance criteria that define both functional and non-functional requirements - including security, availability, and performance under audit.
• Cross-Functional Delivery: Act as the daily working bridge between engineering, InfoSec, and architecture teams, ensuring governance requirements are built accurately and on schedule.
• Stakeholder Enablement: Work with GTM and pillar leads to ensure governance and compliance capabilities are well documented, understood, and leveraged in customer engagements, security questionnaires, and vendor risk assessments.
• Metrics & Reporting: Track and report on the defined KPIs, surfacing execution risks and gaps early.

What You’ll Contribute

• In-depth experience in Platform Product Management, with meaningful exposure to Financial Services (banking, lending, credit decisioning, or consumer finance) required; experience within Enterprise SaaS, Security, Cloud Infrastructure, Data Engineering, or other regulated industries (HealthTech, GovTech) also valued.
• Strong understanding of identity and security architecture - RBAC/ABAC, MFA, SSO, encryption standards (at rest and in transit), and API security.
• Experience designing telemetry and event-logging frameworks, with audit trails that hold up to internal and external review.
• Comfortable conversing with security architects, data engineers, and compliance officers on database schemas, data lineage, and system architecture.
• Hands‑on experience writing detailed PRDs, epics, and acceptance criteria covering non-functional requirements (security, availability, performance under audit).
• Experience with financial services and data privacy regulations, with experience implementing - not necessarily setting - compliance requirements.
• Proficiency with risk‑adjusted prioritization frameworks (e.g., RICE, WSJF) and Agile/SDLC practices, including integrating compliance checkpoints and security scans (SAST/DAST) into CI/CD pipelines.
• Bachelor's /Master's degree in engineering, computer science, or a scientific‑related field.

About US

FICO is a leading analytics and decision management company that empowers businesses and individuals around the world with data‑driven insights. Known for pioneering the FICO Score, a standard in consumer credit risk assessment, FICO combines advanced analytics, machine learning, and sophisticated algorithms to drive smarter, faster decisions across industries. From financial services to retail, insurance, and healthcare, FICO's innovative solutions help organizations make precise decisions, reduce risk, and enhance customer experiences. With a strong commitment to ethical use of AI and data, FICO is dedicated to improving financial access and inclusivity, fostering trust, and driving growth for a digitally evolving world.