Product Manager, Access Reviews

Lumos; New York (NY); On-site; USD 120,000 - 190,000; Full time

Job summary

Lumos is building the next era of identity governance. As Product Manager, Access Reviews, you will lead the shift from manual reviews to largely autonomous processes powered by AI, with humans stepping in only where judgment is required.

You’ll own the product strategy and collaborate with engineering, design, and customer-facing teams. You’ll report to the Head of Product and shape the roadmap for a product used by IT and security teams across enterprises, delivering features that reduce risk

Responsibilities

• Agent-first reviews: own the core to configure, scope, launch and run reviews via API and MCP.
• Autonomous decisioning: enable auto-decisions where unambiguous, with clear reasoning where not.
• Expand certification: include identity-centric reviews, policy reviews, and non-human identities and AI agents.
• Roadmap and quarterly plan: own the strategy and quarterly gameplan for a critical product surface.
• Compliance credibility: ensure what we ship is audit-ready and defensible.
• Customer and field partnership: work with customers and field teams to shape the product.

Job description

Every breach, every failed audit, every new hire stuck in onboarding purgatory traces back to the same question: who has access to what — and should they? Identity is where modern companies break. Too much access leaks data. Too little grinds the business to a halt. Lumos is the industry's first Autonomous Identity Platform — software that doesn't just surface access risk, but acts on it. We started with a self-service AppStore and grew into the critical infrastructure connecting apps, identities, and data for GitHub, MongoDB, Mars, Pinterest, Anduril, Intercom, Roku, and Netskope. At the center is Albus, our AI agent for identity — mining roles, approving access, and catching the drift humans miss. You'll ship work that thousands of IT and security teams touch every day. You'll own problems without playbooks, because the category is being redefined in real time — by us.

Why Lumos?

• Jump on a rocketship. Since launching out of stealth in April 2022, we've grown from 20 to ~130 Alchemists and raised over $65M from a16z, Scale, Neo, Greg Brockman (President at OpenAI), and Phil Venables (CISO at Google).
• Customers love us — and so does the industry. Named a Strong Performer in the 2026 Gartner Voice of the Customer for IGA — 4. 7/5, with 96% of reviewers saying they'd recommend us. Our customers cut time-to-access by 98%, slash IT tickets by 72%, and eliminate excess privilege at scale.
• A culture worth joining. Three years running on Forbes' Top 100 Best Startup Employers in America (2024, 2025, 2026) — measured on culture, retention, growth, and job creation. That's our Alchemists, not our marketing. See what we live by here lumos. com/p/the-anatomy-of-an-alchemist.

OVERALL DESCRIPTION

Lumos is making it a joy for companies to manage their apps and identities. Access Reviews is one of our most widely adopted products — the surface where customers prove, to auditors and to themselves, that the right people have the right access. It's used by compliance and IT teams and by the managers who review access on a cycle and want to spend as little time in it as possible. As Product Manager, Access Reviews, you'll own the next chapter: moving reviews from something people complete to something that largely runs itself. Agents configure, scope and run reviews through our API and MCP. AI makes the obvious decisions. Humans step in only where judgment is genuinely required. And the definition of what can be reviewed expands — from applications to identities, policies, and the non-human identities and AI agents now operating inside every enterprise. This is a customer-facing product role with real ownership: strategy, quarterly plan, craft, and outcomes. You'll report to the Head of Product and work closely with engineering, design, and our customer-facing teams.

YOUR RESPONSIBILITIES

• Agent-first reviews. Own the agentic core of the product: agents that configure, scope, launch and run reviews via API and MCP, and reviews triggered by events rather than calendars. This is the primary focus of the role.
• Autonomous decisioning and reviewer trust. Make AI a trusted teammate — auto-decisioning where the answer is unambiguous, clear reasoning where it isn't, and a review experience people advocate for rather than tolerate.
• Expand what can be certified. Take reviews beyond applications: identity-centric reviews, policy reviews, and reviews over non-human identities and AI agents — a governance problem the industry has not yet solved.
• Roadmap and quarterly plan. Own the strategy and quarterly gameplan for a critical product surface, and make the trade-offs between new review coverage, agentic depth, and fitting how customers actually operate.
• Compliance credibility. Ensure what we ship produces defensible, audit-ready evidence — the product has to hold up in a real audit, not just look rigorous.
• Customer and field partnership.