Senior Product Owner to help implement a cloud native application protection program with one of our major banking clients-
Location Address : Hybrid Toronto 2 days / week (flexible, HM is in Tues-Thurs, team comes in Tuesdays and Thursdays) need candidates in GTA
Contract Duration : 6 months (Possibility of extension & conversion to FTE)
Schedule Hours : 9am-5pm Monday-Friday; standard 37.5 hrs / week
Story Behind the Need
- Business group : CAP Program Cloud Acceleration Program
- Project : Implementing CNAPP (Cloud Native Application Protection Platform) product across the organization overseeing the CNAPP product implementation through the full lifecycle (from inception to full maturity) phase : have started implementing but at early stages;
project will go into the next 2-3 years
Role Summary : Cloud Infrastructure Entitlement Management and Sensitive Data Protection about permissions and roles, working with GIAM
Typical Day in Role :
- Closely working with architects on technical product solutioning and entablements
- Responsible for defining the product requirements, security policies, prioritizing features, and managing the product development process
- Collaborate with stakeholders across the Bank - cloud security engineering, technology, security architecture, security advisory, network - to drive CNAPP PoC, vendor selection and Business Case for implementation
- Will work closely with IS&C stakeholders to define an intake model for all Cloud Security initiatives and work with channel teams to capture requirements and build a roadmap for implementation
- Communicate regularly with various business channels on the progress made for various projects in the pipeline
- Manage and prioritize the product backlog, along with new features and enhancements we require from the product
- Product Strategy
- Contribute to the success of our product strategy by driving stakeholder alignment, maintaining a clear RACIs and clearly articulating MVP success criteria and rollout plans
- Facilitate forums and prepare the team for constructive collaboration sessions with cross-functional teams, technology and business channels, and control functions
- Define and report on overall product status, metrics, key achievements, next steps and risks with a data-driven approach
- Define and execute tuning strategy and relevant tuning activities for new product enabled
Must Have Skills :
- 10+ years’ relevant working experience in IT (application development, security etc.)
- 5+ years’ experience as an IT Product Manager or Delivery Lead
- 5+ years’ experience with Cybersecurity domains including Identity Access Management (IAM) and Sensitive Data Protection.
Experience with encryption, network security, compliance familiarity with security tools such as CNAPP.
- 5+ years’ experience with major cloud platforms (Azure and / or GCP - need at least one of these)
- 5+ years’ experience with documenting process, requirements, and product information
- Including tools and processes such as BigQuery, BitBucket / GitHub, Jfrog Artifactory, Ansible, Confluence, Jira, Bamboo etc.
Nice-To-Have Skills :
- Proficiency in APIs, microservices, and cloud automation tools.
- Experience in the financial industry or tech / startups
Education :
- Bachelors in technical field
- Relevant certifications such as Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM) as an asset
Best vs. Average Candidate :
- Need someone who is very strong technically and able to articulate complex technical terms and translate into business terms;
- security and cloud technical expertise sought; able to manage stakeholder relationships;
- Strength with Cloud technology and Cybersecurity takes precedence over nice to haves.
- Successful candidates will have strong technical knowledge, and hence the best fit will have a strong foundation in product management rather than project management.
Demonstrating the ability to define security policies is central to this role. Please note that Identity Access Management (IAM) and Sensitive Data Protection are also a focal point of this role, although the resource will need to have wider knowledge to support key deliverables.
Candidate Review & Selection
- 1 round In Person Interview 50 minutes going through experience, behavioral with HM, and Director