Staff Product Manager, Compliance, Reporting, Insights

Owns compliance and reporting for Horizon3.ai's NodeZero platform, the layer that turns autonomous pentest results into audit-ready evidence and executive summaries, reporting to the Senior Manager of offensive security products. The product manager maps NodeZero findings to controls in SOC 2, ISO 27001, PCI DSS, HIPAA, NIST and FedRAMP or CMMC, decides which frameworks to cover next, keeps mappings current, and designs reports for analysts, auditors and boards.

The role also carries ARR and retention targets, pricing and packaging. It wants five years of startup product management on technical B2B products, three years with GRC frameworks as a PM, auditor or compliance engineer, and SQL or BI skills. Based in the Bay Area or New York, with up to 15% travel.