Product Security Compliance Manager

Keysight Technologies, Inc.•Loveland, OH

1d•Remote

About The Position

Keysight is seeking a Compliance Assurance Leader to lead the Compliance Operations function within our Product Security Office. This role is responsible for ensuring that Keysight products and development practices meet applicable cybersecurity, product security, regulatory, and customer security requirements. The Compliance Assurance Leader will lead a team responsible for executing a scalable and consistent product security compliance assessment program across Keysight's product portfolio. This individual will bring deep product security and compliance expertise, provide technical and functional leadership to the team, and partner with R&D and business stakeholders to drive consistent execution of product security requirements. The role will oversee compliance assessments, evidence management, risk governance, regulatory readiness, and continuous improvement while partnering closely with R&D, Security Engineering, Quality, DevOps, Product Management, Legal, IT, and other stakeholders. This is a United States remote position with periodic travel.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Systems, or a related field, or equivalent relevant experience.
Typically 8+ years of relevant experience in cybersecurity, product security, compliance, audit, risk management, or a related discipline.
2+ years of management or team leadership experience.
Policy expertise paired with strong technical fluency to engage credibly with Keysight's electrical engineering (EE), computer engineering (CE), and computer science (CS) R&D teams.
Demonstrated subject matter expertise in product security, cybersecurity compliance, risk management, or a related discipline.
Experience implementing, managing, or assessing product security frameworks, security controls, and secure product/software development practices.
Strong understanding of software and product development lifecycles, secure development practices, vulnerability management, security governance, and risk management.
Experience interpreting cybersecurity or product security regulatory requirements and translating them into actionable controls, assessment criteria, or engineering requirements.
Experience managing compliance assessments, findings, remediation activities, evidence, exceptions, and/or risk acceptance processes.
Demonstrated ability to communicate assessment results, compliance posture, and risk information effectively to senior and executive leadership.
Strong stakeholder management and influencing skills, with the ability to drive alignment across technical, business, legal, and governance functions.
Demonstrated program management skills and experience establishing or improving scalable operating models and processes.

Nice To Haves

Experience with product security regulations, standards, and secure development frameworks relevant to technology products.
Experience supporting regulatory or audit readiness across a complex product portfolio.
Experience developing compliance metrics, dashboards, evidence-management processes, or workflow automation.
Experience working within a global technology, engineering, or product development organization.
Relevant cybersecurity, audit, risk, or compliance certification is a plus.

Responsibilities

Lead Keysight's Product Security Compliance Assurance program, including assessment planning, methodologies, execution, reporting, and continuous improvement.
Manage, mentor, and develop a high-performing team of compliance assessors responsible for product security compliance evaluations and evidence reviews.
Establish and continuously improve a scalable, consistent assessment process across the product portfolio to evaluate adherence to internal Product Security Policies, regulatory requirements, and customer security expectations.
Oversee compliance assessments and associated findings, remediation plans, exceptions, and risk acceptance decisions.
Drive regulatory readiness and compliance with applicable product security requirements and frameworks, including the EU Cyber Resilience Act (CRA), CISA SSDF, and customer security requirements.
Maintain and continuously improve product security governance frameworks, policies, standards, controls, and risk management processes.
Support vulnerability lifecycle governance and assist with incident response oversight for external vulnerability disclosures and reporting.
Partner with R&D, Security Engineering, Quality, DevOps, Product Management, Legal, IT, and other teams to identify, communicate, and manage product security and compliance risks.
Establish KPIs, dashboards, evidence traceability, audit-readiness practices, and automation initiatives to improve the efficiency and effectiveness of the compliance program.
Deliver clear reporting to senior and executive leadership on compliance posture, assessment results, risk trends, remediation progress, and areas requiring management attention.
Interpret evolving cybersecurity, product security, and regulatory requirements and translate them into practical controls, assessment criteria, and expectations for product and engineering teams.
Serve as a product security compliance subject matter expert and trusted advisor to technical and business stakeholders.