Associate Director, Technical Product Management

Merck Merck · Pharma · NJ

Product Owner for cybersecurity products within Merck's IT Risk Management & Security (ITRMS) Transformation & Product Management team. The role focuses on the end-to-end product lifecycle, translating security, risk, and business needs into actionable priorities and measurable outcomes. Responsibilities include defining product vision and roadmap, managing the product backlog, leading stakeholder engagement, driving Agile/SAFe execution, and defining/tracking KPIs. The role requires experience in delivering complex technology or cybersecurity products and working in regulated environments.

What you'd actually do

  1. Own the lifecycle of Product Security capabilities from ideation through delivery and continuous improvement
  2. Own and prioritize the product backlog based on: Risk reduction impact Business value and stakeholder needs Regulatory and compliance requirements
  3. Serve as the primary interface across cybersecurity, business, and engineering teams
  4. Champion Agile/SAFe practices and participate in PI Planning and team ceremonies
  5. Define and track KPIs across risk reduction, delivery, and customer satisfaction

Skills

Required

  • Agile Application Development
  • Agile Methodology
  • Asset Management
  • Benefits Management
  • Enterprise Security Operations
  • Information Technology (IT) Risk Management
  • IT Risk Assessments
  • Management System Development
  • Product Lifecycle
  • Product Management
  • Product Prioritization
  • Product Security
  • Product Strategies
  • Requirements Management
  • Security Compliance
  • Security Solutions
  • Stakeholder Relationship Management
  • Strategic Planning
  • System Designs

Nice to have

  • IT Risk Management & Security (ITRMS)
  • cybersecurity domains
  • AppSec
  • Vulnerability Management
  • SIEM/SOAR
  • DLP
  • Insider Threat
  • GxP
  • SOX
  • PCI
  • secure SDLC practices
  • enterprise security tooling
  • Financial and vendor management

What the JD emphasized

  • Experience in regulated environments (GxP, SOX, PCI)