You enjoy shaping the future of product innovation as a core leader, driving value for customers, guiding successful launches, and exceeding expectations. Join our dynamic team and make a meaningful impact by delivering high-quality products that resonate with clients. This role is crucial in delivering comprehensive risk management services, including audit RFIs assistance, risk remediation, data analytics, core issue closure, and action plan language updates. The role requires a comprehensive understanding of Technology Risk and Controls, emerging risks, regulatory requirements, and effective communication and interpersonal skills to work with peer organizations, including second and third lines of defense.

As a Product Manager in External Connection & Integration Services (ECIS) Risk Management team, you are an integral part of the team that innovates new product offerings and leads the end-to-end product life cycle. As a core leader, you are responsible for acting as the voice of the customer and developing profitable products that provide customer value. Utilizing your deep understanding of how to get a product off the ground, you guide the launch of products, gather crucial feedback, and improve top-tier client experiences. With a good commitment to scalability, resiliency, and stability, you will collaborate closely with cross-functional teams to deliver high-quality products that exceed customer expectations.

The External Connection & Integration Services (ECIS) Risk Management team plays a vital role in supporting the organization by providing independent risk assessment, strategy, and risk & control services. The team aligns with Product Line Managers and works closely with their respective Product teams and other peer organizations to embed risk management into processes and products, identifying, managing, and mitigating operational risks.

Job responsibilities

• Develops a product strategy and product vision that delivers value to customers.
• Manages discovery efforts and market research to uncover customer solutions and integrate them into the product roadmap.
• Owns, maintains, and develops a product backlog that enables development to support the overall strategic roadmap and value proposition.
• Builds the framework and tracks the product's key success metrics such as cost, feature and functionality, risk posture, and reliability.
• Assist with Audit RFIs, improving timely and accurate responses to audit inquiries. Lead risk remediation initiatives, pinpointing root causes and executing effective solutions.
• Conduct data analytics to identify risk trends and inform decision-making processes. Facilitate core issue closure, recommending that identified risks are addressed and resolved.
• Manage action plans to reflect current risk management strategies and activities. Implement governance processes to reduce risk from failed internal processes, inadequate identification of risks, inadequate controls, and emerging risks.
• Identify and aggregate thematic risks and trends. Establish and develop adherence to policies and standards impacting technology and cyber risks. Maintain an understanding of product team strategies, product roadmaps, and key investment programs.
• Apply working experience in multiple security or risk management domains (e.g., application security, vulnerability management, data protection, encryption, logging and monitoring, network security).
• Assess technology risks as businesses and products evolve to effectively identify and suggest remediation plans. Manage Compute Platforms (CP) updates and evaluations, improving compliance with current risk management frameworks and standards.
• Develop and implement risk management strategies to proactively address potential threats and vulnerabilities.

Required qualifications, capabilities, and skills 

• 5+ years of experience or equivalent expertise in product management or a relevant domain area
• Advanced knowledge of the product development life cycle, design, and data analytics
• Proven ability to lead product life cycle activities including discovery, ideation, strategic development, requirements definition, and value management.
• Bachelor of Science/Bachelor of Arts degree or equivalent experience
• Experience working in regulated industries, leveraging technology standards, frameworks, compliance, and industry-recognized new ideas/standards. For example - (Information Technology Infrastructure Library (ITIL), National Institute of Standards & Technology (NIST), International Organization of Standardization (ISO), Payment Card Industry (PCI), System and Organization Controls (SOC).
• Demonstrated collaboration with internal and external technology audits (3rd Line of Defense), (CCOR) Compliance, Conduct Operational Risk Management deep dives and testing (2nd Line of Defense), and the ability to advocate on behalf of subject matter experts.
• Advanced level in Office 365 with proficiency combining data sources in Excel. Demonstrate ability to manage complex projects, including risk assessment and mitigation projects, with a focus on delivering results on time and within budget.
• Expertise in using advanced analytical tools and techniques to interpret complex data sets and derive actionable insights for risk management.
• Good ability to communicate complex risk concepts clearly and effectively to diverse audiences, including senior management and external stakeholders. 
• Experience in leading change management initiatives, particularly in implementing new risk management frameworks or processes.
• Demonstrated ability to work collaboratively across various departments and functions to achieve common risk management activities. You will have empathy and a sense of urgency to help define and prioritize work. You are curious in nature and are helpful at bringing clarity to those around you.

Preferred qualifications, capabilities, and skills

• Demonstrated prior experience working in a highly matrixed, complex organization.
• Relevant industry certifications are preferable, such as Certified Information Systems Security Professional (CISSP) and Certified in Risk and Information Systems Control (CRISC) is plus.
• Familiarity with regulatory requirements and compliance standards specific to the financial services industry, such as General Data Protection Regulation (GDPR), Sarbanes-Oxley Act (SOX), and Basel III is plus.
• Commitment to continuous improvement and staying updated with the latest trends and new ideas in risk management and technology.