Senior Product Manager- SaaS

Title: InfoSec SaaS Product Owner Location: New York, NY 10174, Hybrid Role (3 days in office) Duration: 12 Months+

Pay rate $80 Per hr on W2

Summary
This is a SaaS product management position with a security dimension, working within the Information Risk Management (IRM) function and partnering closely with the internal IT department. The position's core focus is to own the end-to-end lifecycle of the organization's SaaS portfolio from discovery, evaluation and onboarding through adoption, optimization, renewal and retirement. The successful candidate will collaborate with business stakeholders, and vendors, translating business needs into product requirements and ensuring the portfolio delivers measurable value while meeting CAA's policy and compliance requirements.
We are looking for candidates who have a passion for partnering with business teams in managing SaaS software products and who can pair that with sound judgment around security and third-party risk. You will lead SaaS product discovery, prioritize competing demands and drive adoption across a highly collaborative organization, while ensuring the SaaS solutions we bring in are evaluated and integrated securely. The environment is fast-paced and commonly on the leading edge of technology, including early adoption of various cloud and SaaS services along with the challenges of integrating those services into our business and security practices.
Responsibilities

• Own the full lifecycle of SaaS products from intake and evaluation through onboarding, adoption, optimization, renewal and retirement.
• Serve as the product owner and primary point of contact for key SaaS platforms, gathering and prioritizing requirements from business stakeholders and translating them into clear backlogs.
• Partner with business groups to review workflows and identify opportunities where SaaS products can improve productivity, drive efficiencies and support business objectives.
• Manage vendor relationships as a product partner tracking product roadmaps, evaluating new features and releases, coordinating enhancement requests, and monitoring for renewals, consolidation and savings opportunities.
• Drive adoption and change management for SaaS products, developing enablement materials, coordinating rollouts, and measuring usage and value realization through product metrics and dashboards.
• Coordinate, across service owners, the implementation of core product and security integrations (SSO, Event Logs, Secrets, Alerting, Threat Model and Backup/Recovery) with applications developed in-house and externally/SaaS hosted environments.
• As a secondary responsibility, support the Technology Third-Party Risk Management (TPRM) program, conducting vendor, product and application security assessments and partnering with system owners to integrate security early in the product lifecycle.
• Participate in risk reviews of the IT control framework (NIST CSF, CIS, ITIL, ISO 27001, etc.) and ensure identified security considerations are implemented and solutions are configured securely.
• Coordinate with IRM leadership to develop and deliver key product and security metrics, ensuring both product value and the measurable effectiveness of CAA's technical controls.

Required Capabilities

• A minimum of 3-4 years of experience in product management, SaaS/software product ownership, or technology program management.
• Demonstrated experience managing the lifecycle of enterprise SaaS products evaluation, onboarding, adoption, renewal and retirement.
• Strong stakeholder-management skills, with the ability to gather, prioritize and translate business requirements into product roadmaps and backlogs.
• Experience managing vendor relationships and negotiating/tracking product roadmaps, releases, renewals and enhancements.
• A Bachelor's or Master's Degree in a relevant field of work.
• A minimum of 2 years' experience in cybersecurity, third-party risk management or a closely related security discipline (secondary focus).
• Strong analytical skills in conducting due diligence to identify, assess and prioritize vendor and product risks.
• Familiarity with information security frameworks (NIST, ISO 27001), data privacy regulations (GDPR, CCPA), and information security certifications/attestations (SOC, ISO, PCIDSS, FedRAMP).
• Experience using product and security analytics tooling to produce operational metrics and dashboards.
• A strong understanding of the fundamental operations of servers, operating systems, cloud applications, SaaS platforms and infrastructure.

Desired Skills

• Core skills in SaaS product management, product ownership, and technology lifecycle management, complemented by cybersecurity and Third-Party Risk Management fundamentals.
• Familiarity with product management and collaboration tooling (e.g. JIRA, Confluence, roadmap/backlog tools) and with SaaS management or SaaS spend/optimization platforms.
• Familiarity with Third-Party Risk Management tools/processes such as OneTrust, SIG or similar GRC platforms.
• Experience with Azure and AWS Cloud environments and familiarity with core Cloud and SaaS services and architecture.
• Familiarity with core security concepts of Single Sign-on (e.g. PingFed, Okta, SAML), Identity and Access Administration (Active Directory, Azure AD, AWS IAM) and Event Management (Splunk).
• Expert skills in using the Microsoft Office suite and JIRA.

If you're interested in above role please send me your updated resume to