Senior Product Manager

SYSCOM’s client is seeking a Senior Product Manager to support the Governance, Risk, and Compliance (GRC) team within the enterprise Information Technology organization of a highly regulated institution. The GRC team is responsible for defining, implementing, and managing processes that support compliance, policy, outreach, privacy, and security-related initiatives across the organization. This role will drive strategy, roadmap development, and automation initiatives that enhance compliance effectiveness, risk reduction, and operational efficiency.

Hybrid role with some onsite presence required in Washington, DC.

U.S. Citizenship required.

The Senior Product Manager will lead product strategy and execution for GRC-related platforms, automation initiatives, and compliance enablement capabilities. This individual will translate regulatory requirements, federal security frameworks, and stakeholder needs into scalable technology solutions that integrate seamlessly into Agile and Dev Ops environments. The role requires deep collaboration with engineering, Dev Ops, security, privacy, and business stakeholders to enable continuous compliance and measurable risk reduction.

Ideal candidate will have been a Product Manager embedded within GRC or IT security teams; GRC analyst or security compliance professional who transitioned into Product Management and experience leading compliance automation or security platform modernization initiatives.

• 5+ years of Product Management experience
• Experience serving as Product Manager, Product Owner, or Technical Product Manager
• Demonstrated experience:
  • Developing and managing product roadmaps
  • Managing and prioritizing product backlogs
  • Writing and refining user stories
  • Translating business and regulatory requirements into actionable development tasks
• At least 2 years focused on security, compliance, risk management, or GRC-related initiatives
• Proven experience streamlining and automating business processes through technology solutions

• Strong working knowledge and applied experience with federal security and compliance frameworks, including:
  • NIST 800-53, FISMA, FedRAMP, and Risk Management Framework (RMF)
• Experience with:
  • Policy interpretation and implementation
  • Authority to Operate (ATO) processes
  • POA&M management
  • Federal information security principles
  • Privacy regulations and controls
• Demonstrated ability to translate regulatory and policy requirements into product/process requirements and system capabilities.

• Experience working within federal agencies or as a federal contractor
• Strong understanding of federal security compliance environments
• U.S. Citizenship required

• Experience working in Agile/Scrum environments
• Proficiency with Jira or similar backlog management tools
• Close collaboration with engineering and Dev Ops teams
• Experience integrating security and privacy controls into Agile and Dev Ops workflows
• Familiarity with compliance automation and continuous compliance enablement
• Experience balancing short-term delivery needs with long-term product strategy

• Experience with one or more enterprise GRC platforms, such as:
  • Service Now GRC
  • Archer
  • One Trust
  • Logic Gate
• Familiarity with cloud security concepts and modern cloud-based compliance architectures.

• Strong stakeholder management and cross-functional collaboration skills
• Excellent written and verbal communication skills
• Ability to translate complex security and regulatory concepts for technical and non-technical audiences
• Strategic prioritization and decision-making capabilities
• Ability to synthesize diverse requirements into cohesive product strategies
• Data-driven mindset with focus on measurable outcomes
• Experience managing transparency and alignment around product roadmaps

• Gather and synthesize requirements from technical and non-technical stakeholders to inform strategy and prioritization decisions
• Develop and maintain product roadmaps for GRC automation tools…