Product Security Governance Principal

Fifth Third Bank

. Lead and mature Product Security governance for internally developed customer-facing software, APIs, SDKs, integrations, and related services .

Posted 10/2/2026full-timeRemote • Ohio • United StatesLead💰 $96,500 - $207,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in Product Security governance, cybersecurity assurance, and compliance, with a strong ability to evaluate security controls and influence stakeholders. Proficient in developing governance artifacts and facilitating risk-based decision-making across cross-functional teams.

Highest-signal resume keywords

Product Security GovernanceCybersecurity AssuranceSecurity ComplianceRisk EvaluationTechnical Communication

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security GovernanceControl EvaluationGap AnalysisThreat ModelingPenetration TestingSecurity ScanningSecure DevelopmentIncident ManagementEvidence ReviewRisk Management

Soft Skills

Influencing StakeholdersFacilitating Constructive ChallengeResolving AmbiguityDriving Accountable OutcomesExecutive Communication

Industry Keywords

APIsSDKsComplianceAuditEnterprise ArchitectureVulnerability ManagementGovernance ArtifactsCustomer Assurance ModelSOC 2Product Lifecycle

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Lead and mature Product Security governance for internally developed customer-facing software, APIs, SDKs, integrations, and related services
Define product scope, engagement criteria, review expectations, decision authorities, escalation paths, and evidence standards
Develop and maintain standards, procedures, playbooks, templates, decision records, risk records, and supporting guidance
Facilitate risk-based decisions involving security requirements, control applicability, exceptions, compensating controls, and accountability
Align Product Security practices with enterprise architecture, application security, vulnerability management, risk, compliance, audit, and engineering processes
Lead a scalable customer assurance model for applicable products and services
Coordinate security summaries, whitepapers, assessment responses, and supporting evidence
Partner with Product, Engineering, Risk, Compliance, Legal, Audit, and customer-facing teams on customer, deal, regulatory, and audit needs
Lead Product Security coordination for applicable SOC 2 and related readiness activities
Support system scoping, business-requirement validation, readiness evaluations, gap assessments, evidence coordination, and assessment-provider engagement
Evaluate product security evidence from threat modeling, penetration testing, security scanning, software supply chain practices, secure development, incident management, and remediation
Develop consolidated views of product security risk, control adoption, coverage, and assurance readiness
Lead governance forums, readiness reviews, working sessions, and decision meetings
Identify recurring themes and recommend scalable improvements
Provide updates and recommendations to technical teams, business stakeholders, and senior leaders
Contribute to Product Security strategy, planning, prioritization, and roadmap development
Promote shared accountability for secure and trusted customer-facing products

Requirements

What you’ll need

Seven or more years of progressively responsible experience in Product Security, security governance, cybersecurity assurance, IT risk, security compliance, technology audit, security architecture, or a related discipline
Demonstrated success leading security governance, assurance, readiness, control evaluation, gap analysis, or evidence-review practices in a complex organization
Ability to independently evaluate technical and nontechnical evidence, identify material concerns, exercise sound judgment, and recommend defensible decisions
Experience translating security and compliance requirements into practical expectations for product and engineering teams
Ability to influence senior stakeholders, facilitate constructive challenge, resolve ambiguity, and drive accountable outcomes across Product, Engineering, Information Security, Risk, Compliance, Audit, Legal, and business teams
Strong understanding of administrative, technical, and operational security controls throughout the product lifecycle
Experience maintaining governance artifacts such as standards, procedures, control matrices, evidence inventories, decision records, risk records, and action plans
Strong executive, business, audit, and technical communication skills
Bachelor’s degree in cybersecurity, information technology, information systems, business, accounting, or a related field, or an equivalent combination of education and relevant experience
Position not eligible for immigration sponsorship

Benefits

Comp & perks

Comprehensive benefits supporting physical, financial, emotional, and social well-being
Incentive compensation plan based on company, line of business, and/or individual performance
Differentiated compensation offerings
Employee and family benefits programs