SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 194,000 - 260,000 / annual
Horizon3.ai is a fast-growing cybersecurity company that has built NodeZero, an autonomous penetration testing platform used by organizations ranging from educational institutions to Global 100 enterprises. The platform delivers production-safe autonomous pentests and assessment operations that scale across internal, external, cloud, and hybrid cloud environments.
You will own and accelerate NodeZero's compliance and reporting capabilities—the product layer that transforms autonomous penetration testing results into audit-ready evidence and executive-ready narratives. As enterprises adopt NodeZero to satisfy SOC 2, ISO 27001, PCI-DSS, HIPAA, NIST CSF/800-53, and FedRAMP/CMMC obligations, you will own the product surface where attack results become compliance proof for security practitioners, auditors, and the C-suite.
In this role, you will act as the CEO of the compliance and reporting product, owning its vision, strategy, and priorities while taking accountability for customer outcomes, execution, and commercial success. You will own financial performance by setting ARR, upgrade, and retention targets tied to compliance-led deals and renewals, partnering with Sales, Customer Success, and Finance to identify and deliver against them. You will build and maintain the business plan, deciding which regulated segments and frameworks to invest in based on deal signal, revenue potential, and ROI. You will drive pricing, packaging, and monetization for compliance and reporting capability, including clear upgrade paths that support acquisition in regulated industries and expansion in the installed base.
You will define success metrics and lead regular business reviews covering financial performance, pipeline, adoption, retention, and audit outcomes, explaining gaps and driving corrective action. You will partner with Marketing on positioning to GRC and executive buyers, and with Enablement on messaging, demos, battlecards, and ROI narratives for compliance-driven sales cycles. You will stay ahead of competitors' compliance and reporting offerings, pricing, and positioning, turning win/loss insight into differentiation and sales execution changes.
On the product side, you will partner with GRC/compliance stakeholders (customer CISOs, auditors, internal compliance advisors) to understand framework requirements. You will map NodeZero attack findings and pentest results to compliance control requirements across all operation types, own the roadmap for framework coverage, and partner with Legal/Compliance to keep mappings current as frameworks evolve. You will own end-to-end design of engagement reports, executive summaries, and audit-ready evidence packages, partnering with design and engineering to build reporting templates that satisfy both technical and non-technical audiences. You will synthesize customer and field feedback on report gaps blocking renewals, upsells, or audit sign-off, and track report usage/export metrics to prioritize the highest-leverage reporting gaps.
You will also drive compliance-led expansion by packaging compliance/reporting capability as a differentiator in competitive deals and renewals, identifying and scoping new compliance-adjacent opportunities (e.g., continuous compliance monitoring, control drift detection) that extend NodeZero's CTEM story, and tracking adoption and expansion tied to compliance/reporting features to prove business impact.
The role reports to the Sr. Manager of the offensive security product suite and takes a leadership role in making compliance and reporting a differentiated, horizontal capability across NodeZero. Up to 15% travel is required. Preferred locations are San Francisco Bay Area or New York City.
QUALIFICATIONS:
- Bachelor's degree or equivalent in a technology-related field
- 5+ years of startup PM experience with technical B2B products
- 3+ years working with compliance/GRC frameworks (SOC 2, ISO 27001, PCI-DSS, HIPAA, NIST, FedRAMP) as a PM, auditor, or compliance-facing engineer/consultant
- Experience building reporting or evidence-generation products for security, audit, or regulated industries
- Technical aptitude—comfortable diving into pentest/security findings and translating them into audit-ready language
- Advanced skills in data analysis using tools like Excel, SQL, BI, and ideally Python
- Ability to use modern tools (e.g., ChatGPT, Claude) to quickly and concisely write documents and emails
- Bias towards action and growth mindset
- Executive presence and demonstrated ability to work directly with executives to drive strategy
- Strong verbal and written communication skills
- Demonstrated ambition to grow professionally
- Servant leadership and humility in driving initiatives forward
