Product Security Governance Lead

Fifth Third; Cincinnati (OH); Remote; USD 97,000 - 208,000; Full time

Job summary

Fifth Third Bank seeks a Product Security Governance Principal to lead governance, assurance, and SOC 2 readiness for internally developed customer-facing software, APIs, and integrations. You will align security with enterprise processes, define evidence standards, and drive improvements in product security controls and readiness evidence.

You will coordinate customer assurance materials, evaluate statements for scope and evidence, and collaborate with Product, Engineering, Risk, Compliance,

Qualifications

• Seven or more years of progressively responsible experience in Product Security, security governance, cybersecurity assurance, IT risk, security compliance, technology audit, security architecture, or a related discipline.
• Demonstrated success leading security governance, assurance, readiness, control evaluation, gap analysis, or evidence-review practices in a complex organization.
• Proven ability to independently evaluate technical and nontechnical evidence, identify material concerns, exercise sound judgment, and recommend defensible decisions.
• Substantial experience translating security and compliance requirements into practical expectations for product and engineering teams.
• Strong executive, business, audit, and technical communication skills.

Responsibilities

• Lead and mature Product Security governance for internally developed customer-facing software, APIs, SDKs, integrations, and related services.
• Define product scope, engagement criteria, review expectations, decision authorities, escalation paths, and evidence standards.
• Develop and maintain standards, procedures, playbooks, templates, decision records, risk records, and supporting guidance.
• Facilitate risk-based decisions involving security requirements, control applicability, exceptions, compensating controls, and accountability.
• Lead a scalable customer assurance model and coordinate security summaries, whitepapers, assessment responses, and supporting evidence.
• Lead Product Security coordination for SOC 2 and related readiness activities, including scoping, evidence coordination, and provider engagement.
• Define consistent expectations for product readiness assessments and security evidence; develop consolidated risk views and reporting.
• Lead governance forums, reviews, and decision meetings; drive scalable improvements and provide updates to stakeholders.

Skills

Product Security

Governance

Cybersecurity assurance

IT risk

Stakeholder influence

Executive communication

Audit coordination

Education

Bachelor's degree in cybersecurity, information technology, information systems, business, accounting, or related field

Tools

Control matrices

Evidence inventories

GRC platforms

Job description

Fifth Third Bank seeks a Product Security Governance Principal to lead governance, assurance, and SOC 2 readiness for internally developed customer-facing software, APIs, and integrations. You will align security with enterprise processes, define evidence standards, and drive improvements in product security controls and readiness evidence.

You will coordinate customer assurance materials, evaluate statements for scope and evidence, and collaborate with Product, Engineering, Risk, Compliance,