Principal Product Manager – Defensive Engineering Programs, Controls

Jobtailor; Massachusetts; On-site; USD 150,000 - 210,000; Full time

Job summary

Jobtailor is seeking an experienced security program leader to drive modernization of its control landscape across multiple cybersecurity domains. You will define objectives, KPIs, and roadmaps, partnering with engineering, risk, compliance, legal, and audit to execute remediation and improvements.

The role emphasizes executive communication, cross-functional leadership, and translating complex requirements into actionable engineering programs with governance and reporting.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, Business, or a related field
• 10+ years of experience in cybersecurity, product management, program management, risk management, or governance functions
• Experience leading large-scale cybersecurity, risk, compliance, or security transformation programs
• Strong understanding of security controls, governance frameworks, regulatory requirements, and risk management practices
• Ability to bridge technical engineering teams with risk, compliance, and audit stakeholders
• Strong program management, executive communication, stakeholder management, and decision-making skills
• Certifications such as CISSP, CISM, CRISC, PMP, or equivalent preferred
• Familiarity with security control frameworks such as NIST, CIS Controls, ISO 27001, or similar

Responsibilities

• Lead strategic initiatives to modernize and mature the security engineering control landscape across multiple cybersecurity domains
• Define control objectives, success criteria, KPIs, and metrics that measure control effectiveness, coverage, and risk reduction
• Partner with engineering, risk, compliance, legal, and audit teams to drive control implementation, remediation, and continuous improvement
• Translate regulatory, audit, and risk requirements into technical roadmaps and executable engineering programs
• Drive complex cross-functional programs from strategy through execution while providing executive-level reporting and governance

Skills

Cybersecurity Leadership

Program Management

Risk Management

Security Controls

Executive Communication

Cross-Functional Collaboration

Education

Bachelor's degree

Tools

NIST

CIS Controls

ISO 27001

Job description

• Lead strategic initiatives to modernize and mature the security engineering control landscape across multiple cybersecurity domains
• Define control objectives, success criteria, KPIs, and metrics that measure control effectiveness, coverage, and risk reduction
• Partner with engineering, risk, compliance, legal, and audit teams to drive control implementation, remediation, and continuous improvement
• Translate regulatory, audit, and risk requirements into technical roadmaps and executable engineering programs
• Drive complex cross-functional programs from strategy through execution while providing executive-level reporting and governance

Requirements

• Bachelor's degree in Computer Science, Information Security, Engineering, Business, or a related field
• 10+ years of experience in cybersecurity, product management, program management, risk management, or governance functions
• Experience leading large-scale cybersecurity, risk, compliance, or security transformation programs
• Strong understanding of security controls, governance frameworks, regulatory requirements, and risk management practices
• Ability to bridge technical engineering teams with risk, compliance, and audit stakeholders
• Strong program management, executive communication, stakeholder management, and decision-making skills
• Certifications such as CISSP, CISM, CRISC, PMP, or equivalent preferred
• Familiarity with security control frameworks such as NIST, CIS Controls, ISO 27001, or similar

Core Competencies

Demonstrates expertise in leading cybersecurity initiatives, defining control objectives, and translating regulatory requirements into actionable engineering programs. Proficient in program management and stakeholder engagement to drive security transformation and risk management.

Highest-signal resume keywords

• Cybersecurity Leadership
• Program Management
• Risk Management
• Security Control Frameworks
• Executive Communication

ATS Optimization Keywords

Hard Skills

• Security Controls
• Governance Frameworks
• Regulatory Requirements
• Risk Management Practices
• Control Effectiveness Metrics
• KPI Definition
• Technical Roadmaps
• Control Implementation
• Remediation Strategies
• Cross-Functional Program Execution

Soft Skills

• Stakeholder Management
• Decision-Making
• Executive-Level Reporting
• Continuous Improvement
• Collaboration

Certifications & Qualifications

• CISSP
• CISM
• CRISC
• PMP

Industry Keywords

• Cybersecurity
• Risk Management
• Compliance
• Security Transformation
• NIST
• CIS Controls
• ISO 27001