Trust Product Manager (Security, Privacy & Compliance | GovTech

Atomic HR; Clifton (TX); À distance; USD 150 000 - 230 000; Plein temps

Résumé du poste

Atomic HR is seeking a remote Trust & Compliance leader who can define and own the strategy for the company’s trust layer. You will turn regulatory, security, and privacy requirements into concrete product and operational initiatives, coordinating across Product, Engineering, Delivery and company operations.

You will guide audits, evidence collection, and risk remediation, while ensuring a strong product-management discipline with roadmap ownership and cross-functional delivery.

Qualifications

• Significant hands-on experience owning security, privacy, trust, risk or compliance programs inside a software company.
• Experience translating regulatory and customer requirements into product/technical specs.
• Strong product management skills: requirements, prioritization, roadmap ownership and delivery.
• Experience leading audits, security questionnaires and remediation programs.
• Working knowledge of SOC 2, NIST 800-series controls, HIPAA or government security standards.

Responsabilités

• Own the trust transformation across Product, Engineering, Delivery and operations.
• Turn regulatory, security and privacy requirements into actionable product and process changes.
• Coordinate audits, vendor risk reviews and evidence collection.
• Lead cross-functional initiatives to embed trust controls as default practices.
• Engage with security, legal and procurement teams, including government-related inquiries.

Connaissances

Trust & Compliance

Product management

Security programs

Privacy

Risk management

Audits & assessments

Communication

Description du poste

Our client builds technology that helps families access public benefits. It also helps governments, health plans and other organizations run those programs more effectively. Their work with state and federal agencies, Medicaid organizations and health plans is growing fast. As it does, trust, security, privacy and compliance have become core product requirements. This is not a typical PM role where compliance is just one feature area. It's also not a policy-only compliance job, and not a pure security engineering seat. We're looking for a trust and compliance expert who is also an excellent product leader . You'll own the strategy and requirements for the company's Trust layer: the platform features that make security, privacy, compliance and auditability part of how the software works. You'll also run the trust and compliance program day to day, and own a company-wide trust transformation. You'll understand a requirement, work out what it means for the business and the software, bring the right people together, and see the work through.

Lead the Trust Transformation

Own the company's new trust operating model across Product, Engineering, Customer Delivery and company operations.

• Turn regulatory, customer, security and privacy requirements into clear product, technical and operational requirements.
• Set durable approaches to production access, data handling, environment separation, release governance and evidence collection.
• identity and access management, with least-privilege access
• data classification, privacy, consent and data provenance
• retention and data governance
• Move controls out of manual processes and into reusable, software-enforced capabilities, so the compliant path becomes the default path.

Own the Trust & Compliance Program

Maintain policies, controls and evidence in Vanta, and coordinate control owners across the company.

• Own the compliance roadmap and turn new requirements into cross-functional initiatives people can execute.
• Keep a clear view of risks, control gaps, exceptions and remediation commitments.
• Give leadership clear recommendations when trust requirements force business or product trade-offs.

Lead Audits, Assurance & Security Programs

Coordinate external audits, penetration tests and vendor risk reviews, and drive findings through to closure.

• Launch the NIST 800-series alignment program and help chart the path toward FedRAMP-aligned practices.
• Act as the main contact for customer security, privacy, compliance and AI-governance requirements.
• Lead responses to security questionnaires, privacy and AI-use assessments, and procurement reviews.
• Represent the company with security, legal and procurement teams at government agencies, Medicaid organizations and health plans.
• Turn recurring customer requirements into reusable controls instead of solving them one customer at a time.

Significant hands-on experience owning security, privacy, trust, risk or compliance programs inside a software company

• Experience in regulated environments such as government, public-sector tech, healthcare, Medicaid, health plans or similar high-trust industries.
• Working knowledge of SOC 2, NIST 800-series controls, HIPAA and government security standards.
• A track record of leading audits, security questionnaires, penetration-testing programs and remediation.
• Strong product management skills: problem definition, requirements, prioritization, roadmap ownership and cross-functional delivery.
• Enough technical fluency to go deep with senior engineers on architecture, access models, data flows and controls.
• The credibility and communication skills to stand in front of sophisticated customer security teams.
• A fully remote role within the U.Real ownership: you'll shape how trust is built into both the platform and the way the company operates.

Mission-driven impact: your work helps families access the public benefits they rely on.