Staff Product Manager, Compliance, Reporting, Insights

New York City, NY, Remote. Posted 22 days ago

The role

This person will own and accelerate NodeZero's compliance and reporting capabilities. They will manage the product roadmap to turn autonomous penetration testing results into audit-ready evidence for security practitioners, auditors, and the C-suite.

What you will do

Own the vision, strategy, and priorities for the compliance and reporting product
Set ARR, upgrade, and retention targets and partner with Sales, Customer Success, and Finance
Build and maintain the business plan for regulated segments and frameworks
Drive pricing, packaging, and monetization for compliance and reporting capability
Define success metrics and lead regular business reviews
Partner with Marketing on positioning to GRC and executive buyers
Stay ahead of competitors' compliance and reporting offerings
Own adoption and value realization with Customer Success
Map NodeZero attack findings and pentest results to compliance control requirements
Own end-to-end design of engagement reports, executive summaries, and audit-ready evidence packages

Required qualifications

Bachelor's degree or equivalent in a technology-related field
5+ years of startup PM experience with technical B2B products
3+ years working with compliance/GRC frameworks (SOC 2, ISO 27001, PCI-DSS, HIPAA, NIST, FedRAMP)
Experience building reporting or evidence-generation products for security, audit, or regulated industries
Technical aptitude to translate pentest/security findings into audit-ready language
Advanced skills in data analysis using tools like Excel, SQL, BI, and ideally Python
Written communication ability using modern tools like ChatGPT or Claude
Bias towards action
Growth mindset
Executive presence
Verbal communication
Hunger

Nice to have

Python

Benefits

Equity package in the form of stock options
Health, vision & dental insurance for you and your family
Flexible vacation policy
Generous parental leave

About the company

Horizon3 is a fast-growing, remote cybersecurity company dedicated to enabling organizations to proactively find and fix exploitable attack vectors. Their flagship product, NodeZero, delivers autonomous pentests across various environments.