194K–260K USD / year
Staff Product Manager, Compliance, Reporting, Insights
ProductHybrid — New York City, NY, San Francisco, California
Published on 2026-10-23
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Own the strategy and delivery of NodeZero’s compliance, reporting, and evidence-generation capabilities. Turn autonomous penetration-testing results into audit-ready evidence and clear reporting for security teams, auditors, and executives, while driving adoption and commercial growth.
About the company
Horizon3.ai is a technology company specializing in cybersecurity solutions, focusing on automated penetration testing and threat detection for enterprises. They provide a range of services aimed at enhancing security posture and risk management for organizations across various sectors.
The team
Product Management, Pentest Experience; reports to the Senior Manager of the offensive security product suite.
What you'll do
- Set product vision, roadmap, business plan, pricing, and success metrics for compliance and reporting.
- Map NodeZero findings to security and compliance framework controls, prioritizing coverage by customer needs and deal signal.
- Lead the design of engagement reports, executive summaries, and audit-ready evidence packages.
- Partner with Engineering, GTM, Sales, Customer Success, Finance, Legal, and compliance stakeholders.
- Drive adoption, retention, expansion, and compliance-led sales outcomes.
- Track product performance, reporting usage, pipeline, and audit outcomes; use results to guide improvements.
What we're looking for
- Bachelor’s degree or equivalent in a technology-related field.
- 5+ years of startup product management experience with technical B2B products.
- 3+ years working with compliance or GRC frameworks such as SOC 2, ISO 27001, PCI-DSS, HIPAA, NIST, or FedRAMP.
- Experience building reporting or evidence-generation products for security, audit, or regulated industries.
- Technical aptitude to interpret penetration-testing findings and translate them into audit-ready language.
- Advanced data-analysis skills using tools such as Excel, SQL, BI tools, and ideally Python.
- Strong written and verbal communication, executive presence, and bias toward action.
Nice to have
- Experience with PCI-DSS 4.0, NIST CSF 2.0, CMMC, or FedRAMP.
- Experience using AI writing tools such as ChatGPT or Claude.
Benefits
- Stock options.
- Health, vision, and dental insurance for employees and their families.
- Flexible vacation policy.
- Generous parental leave.