Cyber Resilience, Product Owner

About the Role

• Product Owner for the Cyber Resilience portfolio, spanning security posture, defense, identity, cloud, and recovery/resilience.
• Acts as a peer to CISOs, responsible for building, pricing, and preselling the portfolio.

Key Responsibilities

• Own the end-to-end roadmap, P&L input, and go-to-market narrative for Cyber Resilience propositions (Posture, Defense, Recovery, Assurance).
• Act as lead presales solutioner and CISO-facing voice on cyber resilience pursuits, shaping RFP/bid responses and closing recovery- and resilience-heavy deals.
• Define and evolve the portfolio's commercial constructs, including service catalogue, tiering, SLAs/service credits, at-risk and resource-unit (RU) pricing.
• Direct and prioritize the technical pool against a single backlog, translating deal and audit commitments into build decisions.
• Own the regulatory, audit, and cyber-insurance narrative, covering DORA/operational-resilience evidence, SOX/PCI/ISO posture, and insurer/underwriter conversations.
• Manage the strategic partner bench, including recovery platform vendors, IR retainers, and SOC/MDR delivery partners.

Requirements & Tech Stack

• Security Domain Breadth: Vulnerability/exposure and posture management, SOC/MDR/EDR operating constructs, incident response and DFIR.
• Security Architecture & Zero Trust: NIST SP 800-207 zero trust, network segmentation/containment design, AD/Entra attack paths and privileged-access design; SASE/SSE awareness.
• Threat & Exposure Management: CTEM methodology across Tenable One/Qualys/Rapid7-class platforms and CNAPP/CSPM (Wiz, Defender for Cloud); MITRE ATT&CK literacy.
• Security Operations Oversight: SIEM/XDR ecosystem fluency (Microsoft Sentinel, Splunk, CrowdStrike/Defender XDR), MDR service constructs, detection-maturity assessment.
• Cloud Security: Securing hybrid multi-cloud estates (Azure/AWS/GCP), posture, identity and workload protection constructs.
• Cyber Recovery & Resilience Engineering: Immutable/air-gapped backup, cleanroom recovery, identity recovery (AD/Entra/Okta); Rubrik/Commvault-class platforms; regulated/bank-grade failover and recovery testing.
• Outcome-Based Commercial Design & Productization: SLAs and service credits, at-risk and resource-unit (RU) pricing, unit-cost modelling; service catalogue/tiering, build-vs-partner sourcing, back-to-back contracting.
• Regulatory, Frameworks & Insurance: NIST CSF 2.0, ISO 27001, DORA/operational resilience, SOX/PCI; cyber-insurance readiness and exposure quantification.
• AI Security & Credentials: Securing AI/agents and AgentOps governance (identity, audit, guardrails); CISSP/CCSP-class credential expectation.