Risk & Compliance Product Manager - Cybersecurity

Key Responsibilities

• Drive strategy and execution for regulatory and cyber risk management offerings, delivering differentiated value propositions for clients.
• Monitor evolving regulatory changes, industry certifications, and frameworks (NIST, PCI, GDPR, SOX) to develop innovative, adaptive solutions.
• Seek investments in automation, analytics, and third‑party integrations that create defensible, scalable compliance value.
• Design modular compliance and risk management components that integrate with partner technologies and client environments.
• Ensure architecture supports automated controls, audit‑readiness, and dynamic reporting.
• Oversee end‑to‑end lifecycle for Risk & Compliance products—ideation, launch, enhancement, sun setting, and EOL—with a focus on continuous alignment to new regulations and client requirements.
• Drive operationalization of compliance workflows, documentation, and process audits.
• Develop enablement assets such as regulatory evidence templates, control catalogs, and audit playbooks.
• Deliver internal and partner training aligned with industry and regional standards.
• Collaborate closely with engineering, delivery, legal/compliance, and customer success to ensure audit readiness and continuous assurance.
• Support sales and pre‑sales to differentiate solutions and address client RFPs with compliance value propositions.
• Analyze market dynamics, regulatory updates, and client feedback to identify capability opportunities and compliance gaps.
• Segment requirements for verticals to build differentiated GTM strategies.
• Guide operational service design for compliance assessments, managed risk, and GRC monitoring.
• Integrate tools to ensure seamless evidence capture, streamlined audits, and risk reduction for clients.
• Define end‑to‑end customer compliance journey—scoping, onboarding, ongoing assurance, and remediation.
• Lead Voice of the Customer initiatives to capture feedback for continuous product refinement.
• Identify and manage alliances with GRC vendors, regulatory tech partners, insurance, and audit firms.
• Drive joint innovations and integrations to expand offering capabilities and customer value.
• Develop positioning, messaging, and competitive strategy for compliance solutions.
• Equip sales with client artifacts, case studies, and value differentiation content.

This role reports directly to the Product Line Leader for Cybersecurity Solutions and works cross‑functionally with architecture, delivery, legal, sales, and customer success teams.

• In‑depth knowledge of GRC platforms, controls, and regulatory ecosystems (NIST CSF, PCI DSS, ISO 27001, SOX, GDPR, etc.).
• Experience with risk quantification, automated control monitoring, evidence collection, and audit operations.
• Product management expertise—vision, roadmap, lifecycle for compliance‑focused offerings.

• Data analytics for risk scoring, continuous control monitoring, and compliance with KPIs.
• Pricing, margin analysis, and business case development for compliance solutions.
• Strong business writing and executive communication for audit and regulatory stakeholders.

• Proven ability to coordinate legal, engineering, and client teams through compliance change cycles.
• Exceptional presentation and influence skills for client/prospect engagements.
• Customer‑centric attitude—adapting to regulatory urgency and high‑stakes remediation scenarios.

• Strategic thinking, balancing regulatory priorities, and business value.
• Adaptable to shifting regulatory, client, and threat landscapes.
• Resilient and detail‑oriented under compliance deadlines and audit cycles.
• Commitment to continual learning in evolving risk and compliance fields.

Compensation is influenced by experience, skills, and organizational requirements. The estimated range for this position is $95,900–$178,100.

Full‑time hires are eligible to participate in the DXC benefit program, which includes health, dental, and vision insurance, employee wellness, life and disability insurance, a retirement savings plan, paid holidays, and paid time off.

DXC Technology is an Equal Opportunity employer. All qualified candidates will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, pregnancy, veteran status, genetic information, citizenship status, or any other basis prohibited by law.