Security Product Lead – Enterprise & Identity Security at Sofi

Sofi

WA - Seattle; UT - Cottonwood Heights; CA - San Francisco; TX - Frisco·4h ago

LeadFull-timeRustMachine LearningData ScienceAIML

Salary Range

$146,625 - $198,375 /year

Estimated

This salary is estimated based on similar roles. The actual salary may vary.

About the Role

We are looking for a Security Product Lead to define the strategic direction, roadmap, and measurable outcomes for securing the organization's enterprise infrastructure, critical internal systems, and user identities. This role sits within the Security Strategy & Delivery team and partners closely with various functional leaders and operational teams.

Key Responsibilities

→Develop and maintain a multi-year strategy and roadmap for Enterprise Security, Identity Security, and AI Security capabilities.
→Align roadmap priorities with enterprise risk objectives, regulatory requirements, and evolving threat landscape.
→Identify capability gaps and define strategic investment opportunities.
→Translate strategic objectives into structured, sequenced initiatives.
→Define the value proposition and service model for Enterprise Security and Identity Management capabilities.
→Establish clear capability maturity targets and continuous improvement plans.
→Maintain and prioritize a strategic backlog aligned to measurable risk reduction outcomes.
→Define and track outcome-based metrics for core security platforms and identity controls.
→Own the portfolio view of Enterprise, Identity, and AI Security initiatives within the broader security strategy.
→Structure and manage strategic programs required to deliver roadmap objectives.
→Track progress against portfolio commitments and escalate risks proactively.
→Manage cross-functional dependencies across various stakeholders.
→Partner closely with functional leaders to align on priorities and execution sequencing.
→Collaborate with Product Management, Engineering, Data Science, Legal, Risk, and Compliance stakeholders.
→Facilitate stakeholder alignment, trade-off decisions, and expectation management.
→Influence without direct authority to drive security principles across enterprise systems.
→Monitor industry trends in enterprise architecture security, identity threats, and AI-specific threats.
→Identify opportunities for automation, analytics enhancement, and process optimization.
→Incorporate lessons learned from security audits and penetration tests into roadmap evolution.

Requirements

✓Bachelor’s degree in Computer Science, Cybersecurity, or related discipline.
✓7+ years of experience in cybersecurity, risk management, or technology strategy roles.
✓Demonstrated experience in Identity & Access Management (IAM), Privileged Access Management (PAM), Enterprise Security, Data Security, or AI/ML Security domains.
✓Demonstrated experience building and managing strategic roadmaps tied to measurable outcomes.
✓Strong understanding of security frameworks, identity protocols (e.g., OAuth, SAML, SCIM), and enterprise risk.
✓Understanding of AI/ML concepts and associated security risks, including data provenance, model integrity, and adversarial machine learning.
✓Strong product mindset with ability to translate strategy into execution.
✓Experience working in matrixed organizations with cross-functional stakeholders.
✓Strong analytical, communication, and executive presentation skills.