Risk & Compliance Product Manager - Cybersecurity

DXC Technology

1d • Hybrid

About The Position

The Risk & Compliance Product Manager - Cybersecurity role is responsible for driving the strategy and execution of regulatory and cyber risk management offerings. This involves monitoring evolving regulations and threats, designing modular and scalable architectures, and overseeing the entire product lifecycle from ideation to end-of-life. The manager will develop enablement assets, collaborate cross-functionally with engineering, legal, sales, and customer success teams, and conduct market research to identify new opportunities. Key aspects include guiding operational service design, enhancing customer experience through VoC initiatives, managing partner ecosystems for innovation, and developing product marketing strategies. The role requires in-depth knowledge of GRC platforms, risk quantification, data analytics, business case development, and strong leadership and communication skills. DXC Technology emphasizes a work model that prioritizes in-person collaboration while offering flexibility to support employee wellbeing and an inclusive environment.

Requirements

• In-depth knowledge of GRC platforms, controls, and regulatory ecosystems (NIST CSF, PCI DSS, ISO 27001, SOX, GDPR, etc.).
• Experience with risk quantification, automated control monitoring, evidence collection, and audit operations.
• Product management expertise—vision, roadmap, lifecycle for compliance-focused offerings.
• Data analytics for risk scoring, continuous control monitoring, and compliance with KPIs.
• Pricing, margin analysis, and business case development for compliance solutions.
• Strong business writing and executive communication for audit and regulatory stakeholders.
• Proven ability to coordinate legal, engineering, and client teams through compliance change cycles.
• Exceptional presentation and influence skills for client/prospect engagements.
• Customer-centric attitude—adapting to regulatory urgency and high-stakes remediation scenarios.
• Strategic thinking, balancing regulatory priorities, and business value.
• Adaptable to shifting regulatory, client, and threat landscapes.
• Resilient and detail-oriented under compliance deadlines and audit cycles.
• Commitment to continual learning in evolving risk and compliance fields.

Responsibilities

• Drive strategy and execution for regulatory and cyber risk management offerings, delivering differentiated value propositions for clients.
• Monitor evolving regulatory changes, industry certifications, frameworks (NIST, PCI, GDPR, SOX), and anticipated threats to develop innovative, adaptive solutions.
• Seek investments in automation, analytics, and third-party integrations that create defensible, scalable compliance value.
• Design modular compliance and risk management components that integrate with partner technologies and client environments.
• Ensure architecture supports automated controls, audit-readiness, and dynamic reporting.
• Oversee end-to-end lifecycle for Risk & Compliance products—ideation, launch, enhancement, sunsetting, and EOL—with a focus on continuous alignment to new regulations and client requirements.
• Drive operationalization of compliance workflows, documentation, and process audits.
• Develop enablement assets such as regulatory evidence templates, control catalogs, and audit playbooks.
• Deliver internal and partner training aligned with industry and regional standards.
• Collaborate closely with engineering, delivery, legal/compliance, and customer success to ensure audit readiness and continuous assurance.
• Support sales and pre-sales to differentiate solutions and address client RFPs with compliance value propositions.
• Analyze market dynamics, regulatory updates, and client feedback to identify capability opportunities and compliance gaps.
• Segment requirements for verticals (Public Sector/US Federal, critical infrastructure, finance, healthcare) to build differentiated GTM strategies.
• Guide operational service design for compliance assessments, managed risk, and GRC monitoring.
• Integrate tools to ensure seamless evidence capture, streamlined audits, and risk reduction for clients.
• Define end-to-end customer compliance journey—scoping, onboarding, ongoing assurance, and remediation.
• Lead Voice of the Customer (VoC) initiatives to capture feedback for continuous product refinement.
• Identify and manage alliances with GRC vendors, regulatory tech partners, insurance, and audit firms.
• Drive joint innovations and integrations to expand offering capabilities and customer value.
• Develop positioning, messaging, and competitive strategy for compliance solutions.
• Equip sales with client artifacts, case studies, and value differentiation content.

Benefits

• Flexibility to support wellbeing, productivity, individual work styles, and life circumstances.
• Fostering an inclusive environment where everyone can thrive.
• Equal Opportunity employer.
• Disability Accommodations.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed
• Number of Employees: 5,001-10,000 employees