GRC Product Manager

Title: GRC Product Manager.
Location: Washington, DC.
Duration: 10+ Months Contract (Possible to extend).

Required Skills and it is mandatory to have:

• Governance, Risk and Compliance (GRC).
• Product Manager – 5 Years
• Security, Compliance, or Risk Management – 2 Years
• Federal Security Compliance Frameworks like FISMA, NIST, FedRAMP etc.
• Agile Development Methodologies
• DevOps
• Roadmap and Outcomes
• GRC Automation tools

Job description:
We are seeking a Product Manager to support the Governance, Risk and Compliance (GRC) team within the IT division at the Board of Governors of the Federal Reserve. This team is responsible for defining, implementing and managing processes that support compliance, policy, outreach, and privacy related work across the organization.

Required Experience:

• 5+ years of Product Management Experience, with at least 2 years focused on working with Security, Compliance, or Risk Management Teams.
• Demonstrated experience gathering requirements, managing backlogs, and delivering roadmaps.
• Demonstrated experience streamlining and automating business processes through technology solutions.
• Knowledge of Federal Security Compliance Frameworks like FISMA, NIST, FedRAMP etc.
• Strong understanding of Federal information Security Principles and Privacy Regulations.
• Experience with Agile Development Methodologies and collaborating closely with engineering and DevOps teams.
• Excellent communication skills with the ability to translate complex security concepts for various audiences.
• Track record of successful cross-functional collaboration and stakeholder management.

The Contractor shall deliver, but not limited to, the following:

• Gather and synthesize requirements from technical and non-technical stakeholders to inform strategy and prioritization decisions.
• Support enhanced understanding and availability of policy and process requirements across the organization.
• Translate regulatory requirements, policy and stakeholder needs into well-defined product/process requirements and user stories.
• Develop product roadmaps for GRC Automation tools and help drive measurable improvements in efficiency and risk reduction.
• Manage and prioritize the team backlog, balancing short term needs with long term strategy.
• Partner closely with engineering and delivery teams to integrate security and privacy controls into agile and DevOps workflows, enabling continuous compliance.  
• Manage stakeholder communication, alignment and transparency about Roadmap and Outcomes.
• Measure outcomes and use feedback and data to inform continuous improvement of processes and services.

Thank you for your time and I look forward to receiving your reply today.