Senior Technology Compliance Product Owner

What you'll do

• Lead complex compliance and assurance programs from initiation through completion with minimal strategic direction.
• Serve as the primary Tech GRC lead for internal readiness assessments, regulatory audits, and external certifications.
• Coordinate audit planning, evidence collection, testing activities, and remediation management for various stakeholders.
• Manage relationships with senior leadership to present risk assessments and data-driven recommendations.
• Provide expert guidance on control design, test strategies, and compliance requirements to product and security teams.
• Develop and maintain internal documentation, training materials, and knowledge-sharing initiatives regarding compliance frameworks.
• Drive operational improvements by building repeatable processes, dashboards, and automation for control monitoring.
• Mentor junior staff and improve the overall quality of delivery across the organization.

What we're looking for

• 5-8+ years of experience in GRC, Information Security, Audit, Risk Management, or a related field.
• Solid understanding of industry frameworks such as SOC 1/2/3, ISO 27001, HIPAA, FedRAMP, and NIST.
• Experience leading multi-functional programs involving Security, Engineering, Product, Legal, Privacy, HR, and external auditors.
• Strong executive communication skills to translate technical and compliance concepts into business-focused recommendations.
• Proven ability to manage partner relationships up to the senior manager and director levels.
• Knowledge of cloud technologies (AWS, Azure, GCP) and modern software development practices.
• Experience leading large-scale assurance programs, certification readiness initiatives, or regulated product onboarding.
• Professional certifications such as CISA, CRISC, CISSP, CISM, or equivalent are preferred.