Staff Product Manager, Compliance, Reporting, Insights

Horizon3•New York, NY

1d•$194,000 - $260,000

About The Position

Horizon3 is seeking a Staff Product Manager to own and accelerate the compliance and reporting capabilities of its NodeZero cybersecurity platform. The role turns autonomous penetration-testing results into audit-ready evidence and executive-ready reporting for enterprises addressing requirements such as SOC 2, ISO 27001, PCI-DSS, HIPAA, NIST CSF/800-53, and FedRAMP/CMMC. The PM will make NodeZero a trusted system of record for audit-ready evidence across Internal, External, Cloud, and WebApp operation types. The position owns the compliance-mapping and reporting roadmap and works closely with Engineering, Go-to-Market teams, executives, customers, and compliance stakeholders. It is accountable for customer outcomes, product execution, commercial success, adoption, and value realization. The role reports to the Sr. Manager of the offensive security product suite and helps establish compliance and reporting as a differentiated horizontal capability across NodeZero. The preferred locations are the San Francisco Bay Area or New York City. Up to 15% travel is required. The role offers a base salary range of $194,000–$260,000, with the exact amount determined by location, qualifications, experience, and skills. Full-time roles are eligible for stock options. Horizon3 also describes its work model as a mix of remote and hybrid arrangements depending on role and location.

Requirements

Bachelor’s degree or equivalent in a technology-related field.
At least 5 years of startup product-management experience with technical B2B products.
At least 3 years working with compliance or GRC frameworks such as SOC 2, ISO 27001, PCI-DSS, HIPAA, NIST, or FedRAMP, as a PM, auditor, or compliance-facing engineer or consultant.
Experience building reporting or evidence-generation products for security, audit, or regulated industries.
Technical aptitude and comfort analyzing penetration-testing or security findings and translating them into audit-ready language.
Advanced data-analysis skills using tools such as Excel, SQL, and BI; Python is ideal.
Strong written communication skills, including the ability to use modern tools such as ChatGPT or Claude to write concise documents and emails.
Bias toward action and ability to drive impact quickly.
Growth mindset, including the ability to delay judgment and learn quickly.
Executive presence and experience working directly with executives to set strategy and execute against success criteria.
Thoughtful verbal communication about professional strengths, development areas, successes, failures, and goals.
Ambition to grow professionally.
Servant leadership, humility, and willingness to take ownership of problems and initiatives.

Responsibilities

Own the vision, strategy, priorities, customer outcomes, execution, and commercial success of the compliance and reporting product.
Set ARR, upgrade, and retention targets tied to compliance-led deals and renewals, and partner with Sales, Customer Success, and Finance to achieve them.
Build and maintain a business plan for regulated segments and frameworks, prioritizing investments according to deal signal, revenue potential, and return on investment.
Drive pricing, packaging, and monetization, including upgrade paths for regulated-industry acquisition and expansion within the installed base.
Define success metrics and lead business reviews covering financial performance, pipeline, adoption, retention, and audit outcomes; explain gaps and drive corrective action.
Partner with Marketing on positioning for GRC and executive buyers, and with Enablement on messaging, demos, battlecards, and ROI narratives.
Monitor competitors’ compliance and reporting offerings, pricing, and positioning; use win/loss insights to improve differentiation and sales execution.
Partner with Customer Success to improve adoption and value realization, accelerate time to the first audit-ready report, deepen usage, and use churn analysis to improve retention and identify expansion.
Work with GRC and compliance stakeholders, including customer CISOs, auditors, and internal compliance advisors, to understand framework requirements.
Map NodeZero attack findings and penetration-test results to compliance control requirements across all operation types.
Own and prioritize framework coverage based on customer segments and deal signals, and partner with Legal and Compliance to keep mappings current as frameworks change.
Own the end-to-end design of engagement reports, executive summaries, and audit-ready evidence packages generated from NodeZero runs.
Partner with Design and Engineering to build reporting templates for technical and non-technical audiences, including SOC analysts, auditors, boards, and CISOs.
Synthesize customer and field feedback from Customer Success, Support, and Sales Engineering to identify report gaps that block renewals, upsells, or audit sign-off.
Track report usage and export metrics to prioritize high-impact reporting improvements.
Partner with Go-to-Market teams to position compliance and reporting capabilities in competitive deals and renewals.
Identify and scope compliance-adjacent opportunities, such as continuous compliance monitoring and control drift detection.
Track adoption and expansion associated with compliance and reporting features to demonstrate business impact.