Platform Product Owner

Essential Responsibilities

Product Strategy & Roadmap

• Own and communicate the PAM product strategy, vision, and multi-year roadmap.
• Prioritize investments and initiatives based on privileged-access risk, regulatory and audit requirements, technology lifecycle, business needs, and enterprise security strategy.
• Maintain and prioritize the PAM product backlog and establish clear objectives and acceptance criteria for delivery.
• Define success measures and report PAM risk-reduction, adoption, control, and delivery outcomes to leadership.
• Evaluate new PAM capabilities and emerging requirements and determine their priority within the product roadmap.

Risk & Control Strategy

• Drive the identification and risk-based remediation of privileged access across applications, infrastructure, databases, cloud, endpoints, and other technology environments.
• Establish product requirements supporting credential vaulting, automated rotation, least privilege, session governance, strong authentication, and controlled emergency/break-glass access.
• Advance Zero Trust and JIT privileged-access capabilities, including approval-based access, time-bound privilege, and policy-driven controls.
• Establish risk-tiered requirements and governance for privileged-access use cases, exceptions, and control implementation.
• Partner with Risk, Compliance, and Audit stakeholders to maintain alignment between PAM capabilities and applicable control requirements.

Product Delivery & Adoption

• Translate business, cybersecurity, audit, and risk requirements into product capabilities, features, epics, user stories, and acceptance criteria.
• Prioritize delivery across PAM Operations, Reliability Engineering, and Product Engineering based on risk and business value.
• Drive enterprise adoption of PAM capabilities and identify barriers to adoption requiring process, technology, or stakeholder remediation.
• Coordinate dependencies across IAM, Cybersecurity, Infrastructure, Cloud, Application, ServiceNow, and other technology teams.
• Ensure new PAM capabilities have defined ownership, support models, documentation, control requirements, and success criteria before implementation.

Governance & Stakeholder Management

• Serve as a primary PAM product representative with technology, cybersecurity, risk, audit, and business stakeholders.
• Build and maintain partnerships across IAM governance, Security Operations, Infrastructure, Cloud, Application teams, Risk, Audit, and Compliance.
• Communicate PAM priorities, dependencies, risks, delivery progress, and outcomes to senior stakeholders.
• Facilitate prioritization and resolution of cross-functional dependencies and competing requirements.
• Ensure significant PAM decisions, exceptions, risks, and roadmap priorities are appropriately documented and governed.

Metrics & Continuous Improvement

• Define meaningful PAM measures covering areas such as risk reduction, privileged credential coverage, control adoption, onboarding, automation, service reliability, and delivery progress.
• Use operational, engineering, audit, and risk information to identify opportunities for product improvement.
• Review recurring operational and reliability issues with Operations and Reliability Engineering to identify opportunities for automation or Product Engineering investment.
• Monitor product adoption and control effectiveness to inform roadmap priorities and continuous improvement.

Qualifications / Requirements

• 10+ years of experience in cybersecurity, IAM, PAM, security controls, or related technology disciplines.
• Demonstrated experience leading enterprise security or identity products, programs, or cross-functional initiatives.
• Strong understanding of Privileged Access Management, including vaulting, credential lifecycle management, password rotation, privileged session management, least privilege, and access governance.
• Experience with PAM technologies such as Delinea Platform and Secret Server, or comparable enterprise PAM platforms.
• Demonstrated ability to develop product strategies, roadmaps, backlogs, requirements, user stories, and measurable success criteria.
• Experience prioritizing cybersecurity initiatives using risk, control, business impact, and technology considerations.
• Experience working with Agile delivery practices and coordinating work across multiple technology teams.
• Strong understanding of IT service management, incident/change processes, and operational support models.
• Demonstrated ability to communicate strategy, risk, priorities, and outcomes to technical and senior leadership audiences.
• Strong stakeholder-management, decision-making, communication, and leadership skills.