Trust Product Manager (Security, Privacy & Compliance | GovTech at Atomic HR | AZ, US | Rezi

Trust Product Manager (Security, Privacy & Compliance | GovTech at Atomic HR

Trust Product Manager (Security, Privacy & Compliance | GovTech

Atomic HR · AZ, US

1 months ago

Trust Product Manager (Security, Privacy & Compliance | GovTech

Atomic HR · AZ, US

a month ago
Resume preview

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now
Resume preview

Tailor your resume to this Trust Product Manager (Security, Privacy & Compliance | GovTech role.

Rezi rewrites your resume against Atomic HR's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Trust Product Manager (Security, Privacy & Compliance | GovTech posting at Atomic HR — free, in seconds.

About the Role

This is a senior, hands-on individual-contributor role for a trust and compliance expert who is also an excellent product leader. You will own the strategy and requirements for the company's Trust layer, which includes platform features for security, privacy, compliance, and auditability. You will also manage the trust and compliance program day-to-day and lead a company-wide trust transformation.

Responsibilities

  • Lead the Trust Transformation, owning the new trust operating model across Product, Engineering, Customer Delivery, and company operations.
  • Translate regulatory, customer, security, and privacy requirements into clear product, technical, and operational requirements.
  • Partner with the Trust engineering lead to design and build the Trust layer.
  • Establish durable approaches for production access, data handling, environment separation, release governance, and evidence collection.
  • Own product direction for identity and access management, tenant and environment isolation, data classification, privacy, consent, data provenance, audit logging, change history, retention, data governance, secure release and deployment controls, and continuous control monitoring.
  • Transition controls from manual processes to reusable, software-enforced capabilities.
  • Own the Trust & Compliance Program, maintaining policies, controls, and evidence in Vanta, and coordinating control owners.
  • Manage the compliance roadmap and translate new requirements into cross-functional initiatives.
  • Maintain a clear view of risks, control gaps, exceptions, and remediation commitments.
  • Provide leadership with clear recommendations on business or product trade-offs driven by trust requirements.
  • Lead Audits, Assurance & Security Programs, maintaining continuous readiness for SOC 2 audits.
  • Coordinate external audits, penetration tests, and vendor risk reviews, driving findings to closure.
  • Launch the NIST 800-series alignment program and guide the path toward FedRAMP-aligned practices.
  • Act as the External Trust Lead, serving as the main contact for customer security, privacy, compliance, and AI-governance requirements.
  • Lead responses to security questionnaires, privacy and AI-use assessments, and procurement reviews.
  • Represent the company with security, legal, and procurement teams at government agencies, Medicaid organizations, and health plans.
  • Translate recurring customer requirements into reusable controls.

Requirements

  • Significant hands-on experience owning security, privacy, trust, risk, or compliance programs within a software company.
  • Experience in regulated environments such as government, public-sector tech, healthcare, Medicaid, health plans, or similar high-trust industries.
  • Working knowledge of SOC 2, NIST 800-series controls, HIPAA, and government security standards.
  • A track record of leading audits, security questionnaires, penetration-testing programs, and remediation.
  • Strong product management skills, including problem definition, requirements gathering, prioritization, roadmap ownership, and cross-functional delivery.
  • Sufficient technical fluency to engage deeply with senior engineers on architecture, access models, data flows, and controls.
  • Credibility and communication skills to effectively interact with sophisticated customer security teams.
  • Comfort working autonomously in a developing function and product environment.
  • Must be based in the U.S.

Skills

  • Security
  • Privacy
  • Trust
  • Risk Management
  • Compliance Programs
  • Product Management
  • Technical Fluency
  • Communication Skills
  • SOC 2
  • NIST 800-series controls
  • HIPAA
  • Government Security Standards
  • Audit Leadership
  • Security Questionnaire Response
  • Penetration Testing
  • Remediation
  • Identity and Access Management
  • Data Governance
  • AI Governance

Location

  • U.S.

Work Type

  • Fully Remote

Experience Level

  • Senior

Salary/Compensations

  • Competitive compensation based on experience

Benefits

  • Real ownership: shape how trust is built into the platform and company operations.
  • Opportunity for a team to grow around you as the function scales.
  • Mission-driven impact helping families access public benefits.
  • Close collaboration with Product & Engineering leadership in a fast-growing company.

About the Company

  • Builds technology that helps families access public benefits.
  • Assists governments, health plans, and other organizations in running programs more effectively.
  • Experiences rapid growth in work with state and federal agencies, Medicaid organizations, and health plans.
  • Prioritizes trust, security, privacy, and compliance as core product requirements.