Principal Product Manager, Software: Identity, Security and Compliance

At Sonos we want to create the ultimate listening experience for our customers and know that it starts by listening to each other. As part of the Sonos team, you’ll collaborate with people of all styles, skill sets, and backgrounds to realize our vision while fostering a community where everyone feels included and empowered to do the best work of their lives.

We are seeking a highly experienced Principal Product Manager, Software to join our team, focusing on the critical areas of Global Identity, Security, and Regulatory Compliance. In this senior individual-contributor role, you will define and deliver the foundational software capabilities that protect our users, their data, and our platform — ensuring we meet global standards and maintain trust at the scale of millions of households.

This is a unique opportunity to shape the security and identity foundation of a world-class audio ecosystem, balancing innovation with the imperative of robust protection and compliance. You'll take on some of the most ambiguous, cross-cutting problems at Sonos — the kind that touch multiple teams, systems, and years of technical and regulatory history — and turn them into a clear, executable strategy.

You'll work cross-functionally with engineering, legal, privacy, and other product teams to build scalable solutions that protect our customers without compromising the simplicity and delight Sonos is known for. As a Principal Product Manager, you're expected to operate as a force multiplier: setting direction, raising the bar on craft, and making the people around you better — not just within your own product area, but across the broader product organization.

Sonos is unable to sponsor or take over sponsorship of an employment visa for this role at this time. We ask that applicants be authorized to work for any US employer, both now and in the future.

This position is considered hybrid, allowing for a combination of remote work and in-office collaboration. Qualified applicants must live within commuting distance of our Boston or Seattle office location and should expect to be in office a minimum of 3 days per week.

• Own product strategy for identity, security, and compliance.
• Define and champion the vision, roadmap, and success metrics for global identity management, platform security, and regulatory compliance within the Sonos software ecosystem — including authentication, authorization, data privacy (e.g., GDPR, CCPA), identity profiles and roles, and related critical initiatives.
• Translate ambiguity into clarity. Take complex regulatory requirements and security needs — often loosely defined and multi-quarter in scope — and turn them into clear, actionable requirements (epics, user stories, acceptance criteria) that engineering and design teams can rally around.
• Champion the user, relentlessly, even in the background. Ground every decision in a deep understanding of Sonos customers, ensuring that security and compliance work protects people without adding friction to the experience they expect from Sonos.
• Hold an exceptionally high quality bar. Sonos customers expect products that 'just work' in their homes, every time. You'll be the voice in the room insisting that security and identity experiences hold up under real-world conditions, edge cases, and scale.
• Partner deeply with engineering, legal, and privacy.
• Lead without authority.
• Monitor and get ahead of regulatory change.
• Mentor and elevate other PMs.
• Modernize how we build product.
• Do more with focused resources.

Basic Qualifications 7+ years of Product Management experience, including at least 3–5 years focused specifically on software products related to global identity, security, and/or regulatory compliance. Demonstrated Principal-level scope, with a track record of owning complex, technical, platform-level, or systems-oriented products in a consumer software or connected-hardware environment. Deep domain expertise in identity management systems (e.g., SSO, MFA, identity providers), cybersecurity best practices (e.g., secure coding, threat modeling), and global data privacy regulations (e.g., GDPR, CCPA).…