Product Manager - Governance, Risk, Compliance (On-site in DC)

Job Title: Product Manager - Governance, Risk, Compliance (On-site in DC)

Industry: Information Technology

Location: Onsite, Washington, DC

Employment Type: Full-Time on contract (9-month contract till December 2026- possibility of an extension).

Job Summary:

Our client is seeking a Product Manager to support the Governance, Risk, and Compliance (GRC) team within the IT division at the client. This team is responsible for defining, implementing, and managing processes that support compliance, policy, outreach, and privacy-related work across the organization.

Key Responsibilities:

• Gather and synthesize requirements from technical and non-technical stakeholders to inform strategy and prioritization decisions.
• Support enhanced understanding and availability of policy and process requirements across the organization
• Translate regulatory requirements, policy, and stakeholder needs into well-defined product/process requirements and user stories
• Develop product roadmaps for GRC automation tools and help drive measurable improvements in efficiency and risk reduction
• Manage and prioritize the team backlog, balancing short-term needs with long-term strategy
• Partner closely with engineering and delivery teams to integrate security and privacy controls into agile and DevOps workflows, enabling continuous compliance.
• Manage stakeholder communication, alignment, and transparency about roadmap and outcomes
• Measure outcomes and use feedback and data to inform continuous improvement of processes and services.

Required Qualifications:

• 5+ years of product management experience, with at least 2 years focused on working with security, compliance, or risk management teams
• Demonstrated experience gathering requirements, managing backlogs, and delivering roadmaps
• Demonstrated experience streamlining and automating business processes through technology solutions
• Knowledge of federal security compliance frameworks like FISMA, NIST, FedRAMP, etc.
• Strong understanding of Federal information security principles and privacy regulations
• Experience with Agile development methodologies and collaborating closely with engineering and DevOps teams
• Excellent communication skills with the ability to translate complex security concepts for various audiences
• Track record of successful cross-functional collaboration and stakeholder management