Trust Product Manager – Security, Privacy & Compliance

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead the Trust Transformation initiative of the company and take ownership of the trust operating model across Product, Engineering, Customer Delivery, and company operations.

• Convert regulatory, customer, security, and privacy requirements into actionable product, technical, and operational specifications.

• Collaborate with the Trust engineering lead to design and implement the Trust layer.

• Establish strategies for production access, data management, environment segregation, release governance, and evidence collection.

• Direct the product strategy for identity and access management, tenant and environment isolation, data classification, privacy, consent, data provenance, audit logging, retention, data governance, secure deployment controls, and ongoing control monitoring.

• Integrate controls into reusable, software-enforced capabilities.

• Maintain policies, controls, and evidence in Vanta, while coordinating with control owners.

• Oversee the compliance roadmap and manage risks, control deficiencies, exceptions, and remediation commitments.

• Provide strategic leadership recommendations regarding trust-related business and product trade-offs.

• Ensure continuous readiness for regular SOC 2 audits.

• Coordinate external audits, penetration tests, and vendor risk assessments, driving findings to resolution.

• Initiate the NIST 800-series alignment program and help develop a path towards practices aligned with FedRAMP.

• Serve as the primary external contact for customer security, privacy, compliance, and AI governance requirements.

• Lead responses to security questionnaires, privacy assessments, and procurement evaluations.

• Represent the company in dealings with security, legal, and procurement teams at government agencies, Medicaid organizations, and health plans.

• Transform recurring customer requirements into reusable controls.

⛳️ Requirements

• Extensive hands-on experience managing security, privacy, trust, risk, or compliance programs within a software organization.

• Experience in regulated sectors such as government, public-sector technology, healthcare, Medicaid, health plans, or other high-trust industries.

• Proficient understanding of SOC 2, NIST 800-series controls, HIPAA, and government security standards.

• Proven track record in leading audits, security questionnaires, penetration testing programs, and remediation efforts.

• Strong product management capabilities, including problem definition, requirements gathering, prioritization, roadmap ownership, and cross-functional delivery.

• Technical fluency to engage deeply with senior engineers on architecture, access models, data flows, and controls.

• Credibility and communication skills to effectively collaborate with sophisticated customer security teams.

• Ability to work independently while the function and product are still under development.

• Must be located in the U.S.

🏝️ Benefits

• A fully remote role available within the U.S.

• Competitive salary based on experience.

• Genuine opportunity to influence the development of the Trust layer and company operations.

• Potential for team expansion around this role as the function grows.

• Mission-driven impact aiding families in accessing public benefits.

• Close collaboration with Product & Engineering leadership in a rapidly growing company.