Security Product Lead – Product & AI Security

Role Overview

Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We are a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way.

Join us to invest in yourself, your career, and the financial world.

The Security Product Lead is responsible for defining the strategic direction, roadmap, and measurable outcomes for securing the organization’s product lifecycle and emerging AI/ML initiatives. This role is part of the Security Strategy & Delivery team and partners closely with Product Security, Engineering, and Data Science/AI leaders and operational teams. The position ensures that Product Security and AI Security capabilities are treated as internal security products—aligned to enterprise risk priorities, supported by a clear roadmap, measured through defined KPIs, and delivered through structured program governance.

The role requires strong cross‑functional collaboration, strategic thinking, and the ability to influence without direct authority. By proactively embedding security controls into the SDLC and addressing unique risks associated with AI/ML systems, this role directly supports the organization’s overarching goal of protecting member trust, safeguarding corporate assets, and ensuring the continued stability and growth of the business.

• Develop and maintain a multi‑year strategy and roadmap for Product Security and AI Security capabilities.
• Align roadmap priorities with enterprise risk objectives, regulatory requirements (e.g., data privacy, AI governance), and the evolving attack surface.
• Identify capability gaps (e.g., secure coding practices, AI model integrity) and define strategic investment opportunities.
• Translate strategic objectives into structured, sequenced initiatives.
• Own the end‑to‑end security assessment process for M&A targets, including technical architecture reviews, vulnerability assessments, security program maturity evaluations, and risk quantification.
• Define and continuously improve the M&A security playbook, methodologies, and standards to enable rapid, consistent, and thorough security evaluations.
• Partner with target companies and internal teams to design secure integration roadmaps that balance speed‑to‑value with security requirements.
• Manage M&A security assessments and integration roadmaps, balancing speed and security.

• Define the value proposition and service model for Product Security and AI Security capabilities, including security requirements for all new product features.
• Establish clear capability maturity targets and continuous improvement plans.
• Maintain and prioritize a strategic backlog aligned to measurable risk reduction outcomes.
• Ensure capabilities are treated as ongoing products with lifecycle ownership.
• Translate business priorities, AI adoption strategy, and risk signals into a prioritized portfolio.
• Partner with engineering and product teams to reduce friction and improve predictability.
• Mature Secure SDLC practices and embed automation into CI/CD pipelines.
• Define and track outcome‑based metrics (risk reduction, adoption, efficiency).

• Own the portfolio view of Product Security & AI Security initiatives within the broader security strategy.
• Structure and manage strategic programs required to deliver roadmap objectives.
• Define milestones, delivery plans, and success metrics for major initiatives.
• Track progress against portfolio commitments and proactively manage risks.
• Manage cross‑functional dependencies across Engineering, Product Management, Data Science, Legal, and other stakeholders.
• Support quarterly and annual planning cycles, including investment.
• Ensure predictable execution through structured governance and reporting cadence.

• Partner closely…