Enterprise Security Platform ART Product Manager

Stifel•St. Louis, MO

6d•Onsite

About The Position

The Enterprise Security Platform ART Product Manager is responsible for the integrated roadmap and program backlog of the Enterprise Security Agile Release Train (ART), which spans Identity & Access Management (IAM), Cyber Security Incident Response (CSIR), Data Security, AI & Application Security, Threat & Vulnerability Management (TVM), Network Security and Security Engineering Enablement. The role turns the priorities of the seven security domains and the feature and technical direction set by security leadership into a single sequenced, achievable program roadmap, operating within the risk-acceptance and regulatory guardrails established by security leadership. Feature content and technical direction are decided by security leadership in partnership with the security domains, informed by the Enterprise Security Architect. Within that framework, the Product Manager owns roadmap integrity, program backlog sequencing, and stakeholder alignment, and also facilitates the ART's planning cadence, PI Planning and related events, and cross-team dependency management.

Requirements

Proven experience managing a program backlog and roadmap across multiple teams, sequencing work using economic frameworks (e.g., WSJF) against priorities set by architecture and leadership stakeholders.
Demonstrated success presenting roadmaps and facilitating scope trade-off discussions at large-scale planning events (PI Planning) spanning multiple teams and domains.
Ability to influence and build consensus among stakeholders with competing objectives (security leadership, engineering leads, audit/compliance, and business partners) without direct authority.
Excellent written and verbal communication skills, with the ability to communicate delivery status, risk, and trade-offs clearly to audiences ranging from engineers to executives.
Strong analytical skills, with the ability to define, interpret, and act on outcome metrics (e.g., risk reduction, control coverage) as well as delivery metrics and KPIs.
Strong working knowledge of enterprise security functions (identity, incident response, data security, application and AI security, vulnerability management, network security) sufficient to prioritize credibly, and experience delivering within a regulated financial services environment.
Ability to prioritize and manage multiple initiatives in a fast-paced environment while maintaining disciplined execution and transparent reporting.
Demonstrated ability to resolve conflicts between priority and deliverability objectively, challenging estimates and framing trade-offs with data.
Bachelor's degree in a related field (e.g., Business, Computer Science, Information Systems, Cybersecurity); or a related combination of education and experience.
7+ years experience in product management, product ownership, or product-focused program leadership.
Proficient in Jira for program backlog management, feature tracking, and roadmap reporting.
Working knowledge of the security domains on the train sufficient to prioritize credibly, challenge estimates, and lead trade-off discussions. Deep hands-on ownership not required.
Proficiency with Microsoft Office suite.

Nice To Haves

Experience with security products and within financial services or other regulated environments.
SAFe Product Owner/Product Manager (POPM) or SAFe Lean Portfolio Management certification; CISSP, CISM, or equivalent security credential.
Jira Align or equivalent portfolio/ART planning tooling preferred.
Experience using AI-assisted tools for backlog analysis, roadmap communication, or reporting is a plus.

Responsibilities

Own and communicate the ART roadmap, translating the strategies of the seven security domains and the direction set by security leadership into a unified, sequenced roadmap; communicate priorities and trade-off decisions to security leadership and executive stakeholders on a regular cadence.
Own the ART program backlog as its single accountable owner, sequencing it using economic prioritization (e.g., WSJF), reflecting the feature and technical decisions made by security leadership and domain leadership and balancing risk reduction, regulatory commitments, and business value; make prioritization decisions decisively, communicate them transparently, and stand behind them.
Document features with clear benefit hypotheses and acceptance criteria; serve as the sole and final authority on feature acceptance and release readiness - no Feature is approved for release without the Product Manager's acceptance at the System Demo.
Partner with domain Product Owners to keep team backlogs well-formed, current, and traceable to ART priorities; coach Product Owners on feature decomposition and acceptance.
Present the roadmap and program backlog priorities at PI Planning; facilitate scope trade-off discussions and confirm PI objectives with security leadership and domain leadership.
Own resolution of capacity-versus-priority conflicts, dependency sequencing across teams, and delivery risk management; escalate feature, scope, and technical decisions to security leadership.
Gather and synthesize input from the Enterprise Security Architect, security leadership, engineering leads, audit/compliance, and business stakeholders to keep the roadmap current; manage competing demands transparently.
Coordinate beyond the Enterprise Security ART, partnering with Product Managers and leaders of other Agile Release Trains, shared services, and enterprise platform teams to align cross-train roadmaps, dependencies, and integration points.
Define and track outcome metrics - risk reduction, control coverage, audit-finding closure, and adoption - alongside delivery KPIs to demonstrate the value the ART delivers.
Participate in Lean Portfolio Management (LPM) forums; support security leadership's investment recommendations and represent the ART's delivery of committed outcomes.
Drive continuous improvement of product practices and planning quality through Inspect & Adapt workshops and retrospectives.
Travel, up to 10%.