Product Security Program Manager

Role Summary

The Center of Excellence directs security work across fourteen engineering groups, a growing risk register, a multi-year regulatory roadmap, and multiple external parties. Today, much of that coordination happens through the CoE Lead’s head and inbox. The program review identified the absence of central coordination as a finding in its own right: fourteen groups reaching out independently, no hub, and no shared record. The Product Security Program Manager is that hub made real. This role ensures every request is routed and answered, remediation plans have owners and dates, and leadership has an accurate view of program status.

Key Responsibilities

· Operate the central intake and coordination hub for all product-cybersecurity requests and responses.

· Own the Risk Register operationally: maintain it, drive monthly review, track each finding to an owner and remediation date, and keep status current.

· Track the Plan of Action and Milestones for open commitments, including F5 remediation, Universal Radio validation, and contract remediation.

· Maintain program reporting, including operational status for the CoE, executive summaries for leadership, and recurring product-security board reporting.

· Coordinate the cross-functional cadence between the CoE and Engineering, Compliance, Legal, Product Management, Service, IT, and external parties.

· Own the audit-and-certification calendar operationally alongside the compliance specialist and coordinate customer audit responses end to end.

· Run the program’s meeting rhythm, action tracking, and documentation so experts spend time on expertise rather than administration.

Required Qualifications

· 6+ years in technical program or project management, with experience in a security, compliance, or engineering-adjacent domain.

· Demonstrated ability to run cross-functional programs across many teams and keep them coordinated and on schedule.

· Strong written communication and executive reporting skills.

· Comfort with security and regulatory subject matter sufficient to route intelligently and translate between audiences.

· Speaks clear English

· Able to participate in various meetings during the morning of US Eastern time zone

Preferred Qualifications

· PMP, PgMP, or equivalent program-management credential.

· Experience standing up a program office, intake process, or coordination function from scratch.

· Familiarity with product-security or GRC tooling, including ticketing systems, risk registers, and evidence repositories.

· Background in a manufacturing or connected-product organization.