Sr. Product Manager

Senior Product Manager — Fraud& Risk Platform

About the Role

We are looking for a Senior Product Manager to own the fraud & risk Platform — a critical, cross-cutting domain that spans AI-native security, fraud & risk, identity, compliance, PCI/cyber posture, data governance, and model governance. You will join a fast-moving fintech payments company and hit the ground running: learning the system with limited documentation, identifying gaps, and translating ambiguity into structured plans that engineering can execute. This is an end-to-end ownership role — from strategy and discovery through PRD authorship, user stories, and delivery — with a particular focus on Application Security and Fraud & Risk initiatives.

What You Will Own

Application Security

• Define and drive the product roadmap for AppSec capabilities — threat modeling, API security, secrets management, and vulnerability lifecycle management.
• Partner with Security Engineering to translate security findings into prioritized, sprint-ready epics and user stories.
• Own PCI-DSS, SOC 2, and cyber posture initiatives end-to-end: gap analysis → remediation roadmap → audit readiness.
• Lead discovery for AI-native security tooling (AI-assisted threat detection, LLM security guardrails, model attack surface mapping).

Fraud & Risk

• Own the full product lifecycle for fraud detection, transaction risk scoring, chargeback management, and identity verification.
• Define rules-engine and ML model requirements; work closely with Data Science to operationalize fraud signals.
• Drive discovery sessions with Operations, Compliance, and Customer teams; synthesize findings into PRDs with clear success metrics.
• Manage end-to-end delivery: business sign-off → engineering engagement → QA → launch → post-launch monitoring.

Data & Model Governance

• Establish product requirements for data lineage, retention policies, and access controls across the Trust Platform.
• Define model governance frameworks: model cards, drift monitoring, explainability, and bias detection for risk/fraud models.
• Coordinate with Legal, Privacy, and Compliance stakeholders to ensure regulatory alignment (CCPA, GDPR, FinCEN, OFAC).

Day-to-Day Responsibilities

• Immerse yourself in the existing system with limited documentation — map what exists, identify gaps, and produce clear documentation and plans.
• Write crisp PRDs, epics, and user stories that engineering teams can act on without ambiguity.
• Lead discovery: stakeholder interviews, competitive analysis, and data analysis to validate hypotheses before committing to build.
• Run sprint planning, backlog grooming, and cross-functional stand-ups for Trust Platform workstreams.
• Prepare and present business cases, roadmap updates, and delivery status to senior leadership for sign-off.
• Evaluate and recommend third-party tools and vendors across the Trust Platform stack (fraud, identity, security scanning, GRC).
• Maintain working knowledge of the regulatory and compliance landscape relevant to fintech payments.

Required Experience & Qualifications

Must-Haves

• 8+ years of product management experience, with at least 5 years in a fintech or payments processing company.
• Hands-on experience owning Application Security or Fraud & Risk product areas end-to-end (strategy through GA delivery).
• Proven ability to learn complex, under documented systems quickly and produce clear documentation.
• Deep comfort writing PRDs and user stories that technical teams can execute; strong understanding of Agile/Scrum.
• Track record of engaging engineering teams effectively post business sign-off — facilitating technical discussions, unblocking impediments, and driving to launch.
• Familiarity with PCI-DSS compliance requirements and how they translate into product/engineering work.
• Experience evaluating and selecting security, fraud, identity, and GRC tooling.

Technical Knowledge

• Fraud & Risk: fraud scoring platforms (Sift, Kount, Stripe Radar, Sardine), rules engines, chargeback workflows
• Identity: identity verification platforms (Persona, Socure, Jumio), SSO, MFA, FIDO2.
• Data & Model Governance: data catalog tools (Alation, Collibra), ML monitoring (Arize, Evidently AI, WhyLabs), model risk management frameworks.
• Compliance & GRC: CCPA, GDPR, SOC 2, NIST frameworks; GRC platforms (Vanta, Drata, Secureframe).
• AI/ML literacy: understanding of LLM security risks, prompt injection, model drift, and responsible AI principles.

Nice to Have

• Experience in card-present or card-not-present payment processing environments.
• Prior work at a payment network, acquirer, issuer, or payment facilitator.
• CISM, CRISC, CIPP, or similar certification.
• Familiarity with AI-native security tooling (Prompt Security, LakeraGuard, Protect AI).