Product Owner II - GRC

Liberty Mutual•Portsmouth, NH

38d•Hybrid

About The Position

We deliver our customers peace of mind every day by helping them protect what they value most. Our passion for placing the customer at the center of everything we do is driving a transformational shift at Liberty Mutual. Operating as a tech startup within a Fortune 100 company, we are leading a digital disruption that will redefine how people experience insurance. At Liberty, you'll thrive in a hybrid setting that fosters in-person collaboration, innovation and growth. This approach optimizes both remote and in-person interactions, enabling you to connect and ideate with your team and deepen valuable relationships across the company, while still enjoying the flexibility of remote work for focused tasks and projects. This role has a hybrid work schedule (2 days onsite) and we are considering candidates based in Portsmouth, NH. Job Introduction: If you are energized by delivering secure, compliant, and user-centered platform capabilities and thrive in complex, high-impact environments, we want to hear from you. We are hiring a Product Owner II to join the Global Cybersecurity (GCS) Governance, Risk & Compliance (GRC) organization on the Product GRC Platform Solutions team. You will be the engineering-facing product owner for a high-impact squad delivering platform capabilities that enable enterprise GRC services ? risk assessments, control management, issue tracking, reporting, and integrations that drive compliance and secure business outcomes. As a Product Owner II you will be the squad-level product owner and the primary bridge between engineering and the broader GRC Portfolio. You will represent product needs from stakeholders and customers in and outside the organization to the engineering team, own and prioritize the backlog for your squad, and work closely with aligned Portfolio Product Owners to ensure consistent strategy, shared dependencies, and delivery of high-value capabilities across the platform.

Requirements

Bachelor's degree in technical or business discipline (or equivalent experience). Master's degree or advanced technical/business certification preferred.
Minimum 7+ years product ownership or equivalent experience in Agile environments (experience as PO/BA/PM with product accountability).
Demonstrated experience working with engineering teams and technical stakeholders (APIs, integrations, cloud-native services).
Proven experience in governance, risk and compliance, cybersecurity, or adjacent domains (controls, audits, regulatory programs).
Experience in Lean-Agile/SAFe environments and participation in PI planning and program-level ceremonies.
Strong stakeholder management and communication skills; comfortable in high-visibility, cross-functional settings.
Practical experience with backlog management tools (e.g., Jira), road mapping, and metrics-driven decision making.

Nice To Haves

Certifications: SAFe POPM, CSM/CSPO, CISM, CRISC, CISSP, PMP.
Experience with GRC platforms, risk management tooling, or commercial SaaS GRC products.
Experience with data modeling, reporting tools, and analytics used for risk & compliance insights.
Prior experience coordinating across multiple product owners and complex dependency maps in large enterprises.

Responsibilities

Own and prioritize the squad product backlog; ensure user stories are clear, testable, and aligned to business outcomes.
Collaborate closely with engineering, architects, QA, and DevOps to translate requirements into shippable increments and remove execution roadblocks.
Partner with Portfolio Product Owners to align roadmaps, manage cross-squad dependencies, and coordinate release planning across the GRC Portfolio.
Serve as the voice of the customer: gather stakeholder input (Business, IT, Risk, Compliance, Legal) and drive decisions that balance regulation, usability, and technical feasibility.
Drive SAFe-aligned planning: participate in PI planning, sprint planning, demos, and retrospectives; contribute to Portfolio/quarterly planning.
Identify and mitigate delivery risks, assumptions, issues, and dependencies; escalate when needed to keep delivery on track.
Ensure regulatory, compliance, and industry constraints are represented in requirements; support multi-state and international compliance timelines.
Define success metrics and monitor product health (adoption, time-to-value, defect trends, compliance KPIs); use data to prioritize and de-risk work.
Lead customer-centric design. Inform usability testing, conduct value stream mapping for GRC processes, and refine product flows.
Communicate status, trade-offs, and expectations broadly: senior leadership, stakeholders, and engineering teams.