Product Security Governance Principal

🔥 2 minutes ago

🏈 Ohio – Remote

🏈 Ohio – Remote

💵 $96.5k - $207.5k / year

⏰ Full Time

🔴 Lead

🚔 Compliance

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Fifth Third Bank

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1858

🛡️ Insurance

💼 Consulting

📦 Logistics

Insurance • Consulting • Logistics

Fifth Third Bank is a diversified financial services company offering a wide range of banking and financial products and services. It provides personal banking solutions such as checking and savings accounts, credit and debit cards, and identity theft protection. Borrowers can access various loans and mortgage options, while investors benefit from investment products like ETFs, mutual funds, and stocks. The bank also provides a robust set of services for businesses and commercial clients, including cash management, treasury management, and specialized lending solutions. Additionally, Fifth Third offers wealth management services with private banking, trust, and estate services. Customers can benefit from Fifth Third's online and mobile banking platforms, enabling them to bank anywhere at any time. Fifth Third Bank is focused on delivering seamless banking experiences with a strong emphasis on customer convenience and security.

📋 Description

• Lead and mature Product Security governance for internally developed customer-facing software, APIs, SDKs, integrations, and related services • Define product scope, engagement criteria, review expectations, decision authorities, escalation paths, and evidence standards • Develop and maintain standards, procedures, playbooks, templates, decision records, risk records, and supporting guidance • Facilitate risk-based decisions involving security requirements, control applicability, exceptions, compensating controls, and accountability • Align Product Security practices with enterprise architecture, application security, vulnerability management, risk, compliance, audit, and engineering processes • Lead a scalable customer assurance model for applicable products and services • Coordinate security summaries, whitepapers, assessment responses, and supporting evidence • Partner with Product, Engineering, Risk, Compliance, Legal, Audit, and customer-facing teams on customer, deal, regulatory, and audit needs • Lead Product Security coordination for applicable SOC 2 and related readiness activities • Support system scoping, business-requirement validation, readiness evaluations, gap assessments, evidence coordination, and assessment-provider engagement • Evaluate product security evidence from threat modeling, penetration testing, security scanning, software supply chain practices, secure development, incident management, and remediation • Develop consolidated views of product security risk, control adoption, coverage, and assurance readiness • Lead governance forums, readiness reviews, working sessions, and decision meetings • Identify recurring themes and recommend scalable improvements • Provide updates and recommendations to technical teams, business stakeholders, and senior leaders • Contribute to Product Security strategy, planning, prioritization, and roadmap development • Promote shared accountability for secure and trusted customer-facing products

🎯 Requirements

• Seven or more years of progressively responsible experience in Product Security, security governance, cybersecurity assurance, IT risk, security compliance, technology audit, security architecture, or a related discipline • Demonstrated success leading security governance, assurance, readiness, control evaluation, gap analysis, or evidence-review practices in a complex organization • Ability to independently evaluate technical and nontechnical evidence, identify material concerns, exercise sound judgment, and recommend defensible decisions • Experience translating security and compliance requirements into practical expectations for product and engineering teams • Ability to influence senior stakeholders, facilitate constructive challenge, resolve ambiguity, and drive accountable outcomes across Product, Engineering, Information Security, Risk, Compliance, Audit, Legal, and business teams • Strong understanding of administrative, technical, and operational security controls throughout the product lifecycle • Experience maintaining governance artifacts such as standards, procedures, control matrices, evidence inventories, decision records, risk records, and action plans • Strong executive, business, audit, and technical communication skills • Bachelor’s degree in cybersecurity, information technology, information systems, business, accounting, or a related field, or an equivalent combination of education and relevant experience • Position not eligible for immigration sponsorship

🏖️ Benefits

• Comprehensive benefits supporting physical, financial, emotional, and social well-being • Incentive compensation plan based on company, line of business, and/or individual performance • Differentiated compensation offerings • Employee and family benefits programs