Position: AI Security Product owner

Location: Canada- remote

Contract

Mandatory Skills: AI governance frameworks (NIST AI RMF, ISO/IEC 42001, EU AI Act awareness).

:

"Key Responsibilities

- Own and prioritize the product backlog for AI security initiatives (e.g., AI/ML risk assessment tooling, model governance workflows, AI usage monitoring, generative AI guardrails).
- Translate enterprise security, privacy, and regulatory requirements (NIST AI RMF, ISO/IEC 42001, SOC 2, PCI, and applicable retail/data-privacy regulations) into actionable user stories and acceptance criteria.
- Partner with Ulta's security leadership, enterprise AI/data science teams, legal, and risk functions to define product vision and success metrics for secure AI adoption.
- Run sprint planning, backlog grooming, and release reviews with the AI Engineer and AI Architect roles; remove blockers and sequence delivery against business priority.
- Define and track KPIs for AI security posture (e.g., model inventory coverage, risk assessments completed, vulnerabilities remediated, policy adoption).
- Produce roadmap artifacts, status reporting, and executive-ready updates for security and technology leadership.




- Evaluate and help select third-party AI security tooling and vendors in partnership with procurement and architecture.

Required Qualifications

- 5+ years of product owner/product management experience, including 2+ years focused on AI/ML, data platforms, or security products.
- Working knowledge of AI/ML lifecycle risk (model risk, data poisoning, prompt injection, adversarial inputs) and AI governance frameworks (NIST AI RMF, ISO/IEC 42001, EU AI Act awareness).
- Experience working within a cybersecurity or GRC (governance, risk, compliance) organization.
- Robust command of Agile/Scrum delivery, backlog management tools (Jira, Azure DevOps), and stakeholder communication at both technical and executive levels.
- Retail, e-commerce, or consumer-facing enterprise experience is a plus.

Preferred Qualifications

- CSPO/CSM or equivalent Agile certification.
- Security certifications (CISSP, CISM, or Security+) or AI governance credentials (e.g., AIGP).
- Prior experience standing up an AI governance or AI security program from the ground up.

📌 Security Product Manager (Canada)
🏢 Raas Infotek
📍 Canada