Principal Product Security Engineer

Make banking a Fifth Third better®
Discover a career in banking at Fifth Third Bank.

Governance leadership and sound risk judgment
Customer trust, readiness, and compliance coordination
Scalable process design and continuous improvement
Lead and mature Product Security governance for internally developed customer-facing software, APIs, SDKs, integrations, and related services.
Develop and maintain standards, procedures, playbooks, templates, decision records, risk records, and supporting guidance.
Facilitate risk-based decisions involving security requirements, control applicability, exceptions, compensating controls, and accountability.
Align Product Security practices with established enterprise architecture, application security, vulnerability management, risk, compliance, audit, and engineering processes.
Customer Assurance
Lead a scalable customer assurance model for applicable products and services.
Evaluate customer-facing security statements for appropriate scope, context, qualifications, and evidence.
Partner with Product, Engineering, Risk, Compliance, Legal, Audit, and customer-facing teams to support customer, deal, regulatory, and audit needs.
Maintain readiness plans, evidence inventories, dependencies, decisions, and accountable action tracking.
Product Risk and Evidence
Evaluate evidence from established activities such as threat modeling, penetration testing, security scanning, software supply chain practices, secure development, incident management, and remediation.
Develop consolidated views of product security risk, control adoption, coverage, and assurance readiness.
Program Operations and Continuous Improvement
Contribute to Product Security strategy, planning, prioritization, and roadmap development.
Promote shared accountability for secure and trusted customer-facing products.
Seven or more years of progressively responsible experience in Product Security, security governance, cybersecurity assurance, IT risk, security compliance, technology audit, security architecture, or a related discipline.
Demonstrated success leading security governance, assurance, readiness, control evaluation, gap analysis, or evidence-review practices in a complex organization.
Proven ability to independently evaluate technical and nontechnical evidence, identify material concerns, exercise sound judgment, and recommend defensible decisions.
Substantial experience translating security and compliance requirements into practical expectations for product and engineering teams.
Demonstrated ability to influence senior stakeholders, facilitate constructive challenge, resolve ambiguity, and drive accountable outcomes across Product, Engineering, Information Security, Risk, Compliance, Audit, Legal, and business teams.
Strong understanding of administrative, technical, and operational security controls and how they work together throughout the product lifecycle.
Experience maintaining governance artifacts such as standards, procedures, control matrices, evidence inventories, decision records, risk records, and action plans.
Bachelor’s degree in cybersecurity, information technology, information systems, business, accounting, or a related field, or an equivalent combination of education and relevant experience.
Experience building or maturing a Product Security program in financial services, another regulated industry, or a complex enterprise.
Experience with customer-facing software, APIs, SDKs, SaaS platforms, cloud-native services, or distributed products.
Familiarity with ISO/IEC 27001, NIST CSF, PCI DSS, cloud shared-responsibility models, and modern software-development practices.
Experience developing customer assurance materials, product security summaries, security whitepapers, or similar artifacts.
Experience with governance, risk, compliance, workflow, evidence-management, or reporting platforms.
Position not eligible for immigration sponsorship.
Product Security Governance PrincipalTotal Base Pay Range 96,500.00 - 207,500.00 USD Annual

At Fifth Third, we understand the importance of recognizing our employees for the role they play in improving the lives of our customers, communities and each other. In addition to the base salary, this role is eligible to participate in an incentive compensation plan, with any such payment based upon company, line of business and/or individual performance.
Our extensive benefits programs are designed to support the individual needs of our employees and their families, encompassing physical, financial, emotional and social well-being. LOCATION -- Virtual, Ohio 00000 Attention search firms and staffing agencies: do not submit unsolicited resumes for this posting. Fifth Third Bank, National Association is proud to have an engaged and inclusive culture and to promote and ensure equal employment opportunity in all employment decisions regardless of race, color, gender, national origin, religion, age, disability, sexual orientation, gender identity, military status, veteran status or any other legally protected status.