Full-Time

Senior Product Manager

SecurityScorecard

SecurityScorecard

501-1,000 employees

Cybersecurity security-ratings platform with AI analytics

Compensation Overview

$150k - $200k/yr

+ Bonus + Equity

No H1B Sponsorship

New York, NY, USA

Hybrid

One day per week on-site in NYC; hybrid work arrangement.

Category
Product (2)
,
Required Skills
webhooks
Observability
REST APIs
Requirements
  • 5–8+ years of product management experience, including significant time on platform, integrations, or data products (APIs, data platforms, or similar)
  • Demonstrated experience shipping and scaling third‑party integrations or data ingestion pipelines in a B2B SaaS or platform environment
  • Strong technical fluency: comfortable discussing APIs, authentication/authorization, data models, event schemas, and integration patterns with engineers and partner technical teams
  • Proven ability to work with external partners and internal stakeholders, align incentives, and drive outcomes without direct authority
  • Data‑driven decision maker with experience defining and using product metrics for reliability, performance, and adoption
  • Excellent communication skills, with the ability to clearly articulate complex technical concepts to both technical and non‑technical audiences
  • Exposure and awareness of Cybersecurity and compliance standards (NIST, PCI, SIG, etc.)
  • Experience owning feature delivery and tradeoffs of a product
  • Prior experience in cybersecurity, data science, compliance, or statistics is preferred
Responsibilities
  • Own the product vision and roadmap for the integrations and data ingestion platform, including partner connectors, APIs, webhooks, eventing, and related tooling
  • Define, prioritize, and deliver bidirectional integrations with strategic partners, including what data is exchanged, sync patterns (batch/stream/event‑driven), and SLAs
  • Design and evolve data ingestion capabilities: schemas and contracts, transformation/mapping flows, error handling, and integration observability so downstream teams can safely rely on ingested data
  • Partner with internal product and engineering teams to understand their integration needs and ensure the platform makes it fast and consistent to build high‑quality integrations
  • Work directly with external partners’ product and technical teams to shape joint solutions, negotiate requirements and timelines, and coordinate launches
  • Collaborate with data, security, privacy, and legal teams to ensure third‑party data ingestion and sharing complies with regulatory, contractual, and internal governance requirements
  • Define and track success metrics for integrations and data ingestion (adoption, reliability, latency, data quality, partner and internal team satisfaction) and use insights to guide prioritization
  • Create and maintain documentation, guidelines, and best practices to help internal teams and partners build on the integrations platform effectively
Desired Qualifications
  • Prior experience in cybersecurity, data science, compliance, or statistics is preferred

SecurityScorecard provides a comprehensive security ratings platform for a wide range of customers to manage cybersecurity risk. It uses AI-driven analytics to identify and prioritize threats, offering a unified view of threat and risk intelligence from an attacker’s perspective. The platform helps secure supply chains, manage third-party cyber risk, ensure regulatory compliance, and support cyber insurance and due diligence, including risk assessment for mergers and acquisitions. What sets it apart is its commitment to transparency—making its methodologies accessible to all and extending security ratings to any organization, not just select customers. Its goal is to create a safer world by providing clear, actionable risk information so organizations can reduce cyber risks and improve security across their networks.

Company Size

501-1,000

Company Stage

Series E

Total Funding

$292.2M

Headquarters

New York City, New York

Founded

2013

Simplify Jobs

Simplify's Take

What believers are saying

  • MAX achieves 370% YoY growth with Workstation launch at RSA 2025.
  • 160% channel ARR growth adds 35 partners including KPMG Canada in 2025.
  • Partnerships with Aon and Crowe expand cyber risk services globally.

What critics are saying

  • BitSight undercuts with superior real-time breach detection in 12-24 months.
  • UpGuard erodes AI differentiation via faster fourth-party monitoring in 6-12 months.
  • New York DFS regulation mandates integrated scoring by July 2026, forcing pivots.

What makes SecurityScorecard unique

  • SecurityScorecard rates over one million companies using patented A-F scale across 10 risk factors.
  • AI Agents automate TPRM workflows like questionnaire analysis and remediation planning.
  • HyperComply acquisition boosts AI-driven compliance automation for questionnaires.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Health benefits

Education stipend

Unlimited PTO

Parental leave

401K

Stock options

Referral bonuses

Remote work available

Growth & Insights and Company News

Headcount

6 month growth

-1%

1 year growth

0%

2 year growth

-3%
SecurityScorecard
Apr 9th, 2026
Introducing SecurityScorecard AI Agents.

Introducing SecurityScorecard AI Agents. Transform your vendor risk management with new SecurityScorecard AI Agents. Learn how to automate security questionnaire management, gain real-time threat insights, and accelerate remediation to stay ahead of emerging cyber threats. Third-Party Risk Management (TPRM) demands time that most teams do not have. Most security teams spend several hours of their day conducting manual tasks, navigating page-by-page through vendor profiles, chasing down score drops, and manually compiling remediation plans. These workflows slow your team and limit your ability to reduce risk. This isn't just exhausting; it's a strategic bottleneck. Every hour spent on a spreadsheet is an hour not spent on identifying and addressing critical vulnerabilities. With an increase in third-party attacks doubling over the past year it is now more important than ever for teams to catch critical vulnerabilities This release addresses those limitations. SecurityScorecard is pleased to announce the official release of 10 new SecurityScorecard AI Agents. These aren't just chatbots; these AI agents execute defined TPRM workflows without manual intervention. They are autonomous assistants designed to handle the manual grind of traditional TPRM workflows. They analyze vendor data, identify risks, and support remediation planning in seconds. This allows you to reclaim your time and focus on what matters most: strategy and resilience. Introducing 10 new AI Agents to accelerate your TPRM program Why manual Third-Party Risk Management slows security teams. Monitoring critical vendors in traditional TPRM programs often relies on reactive processes. You receive an alert, you log in, you investigate the cause, and you manually draft an email to the vendor. SecurityScorecard's AI Agents flip this script. They act as an extension of your team, executing complex workflows in seconds that used to take hours. You can identify and address risk before it escalates into a breach. How AI Agents automate Third-Party Risk Management workflows: SecurityScorecard Inc. has three categories of agents: Analysis and Monitoring Agents, Breach Analysis Agents, and Remediation Planning Agents. AI Agents for Analysis and Monitoring. Streamline your internal operations and make your data more portable with AI agents for data, reporting, and workflows. * Reporting Agent: Transform complex metrics into line charts or trend graphs. Track portfolio health over time and export results as CSVs or images for your next board deck. * Rule Builder Agent: Set up alert rules and monitoring for entire portfolios at once, replacing tedious manual configuration. * Monitoring Agent: Set up alert for score drops and breach events for proactively monitoring vendors * Questionnaire Gap Analysis Agent: In addition to sending questionnaires to vendors, you can leverage agents to analyze received responses to identify gaps and create follow-up requirements. AI Agents for Breach Analysis. Leverage Breach Analysis Agents for your vendors as well as fourth party vendors with specialized AI agents for malware, ransomware, and supply chain risk. * Downstream Breach Analyst (Automatic Vendor Detection): Gain an intuitive view of fourth-party risk. Understand how breaches at your vendors' vendors impact your security posture. * Malware & Ransomware Analyst: Conduct broad scans for infection events to identify high-risk areas before they escalate. AI Agents for Remediation Planning. Close the gap between finding a risk and fixing it with AI agents for vulnerability monitoring and remediation plans. * KEV Remediation Plan Agent: Quickly identify Known Exploited Vulnerabilities (KEVs) across your portfolio and draft vendor-facing emails for immediate outreach. * Score Drop Remediation Agent: Instantly explain the "why" behind score fluctuations and outline specific corrective actions. * Critical Vulnerability Agent: Scan your entire portfolio for general Common Vulnerabilities Exposures (CVEs) to prioritize your response. * Breach Remediation Plan Agent: Pinpoint breach events and build a step-by-step recovery and communication plan. How AI reduces vendor Review time and manual effort. Efficiency is essential for scaling TPRM as vendor ecosystems grow and as AI changes threat actors' calculus. By automating the repetitive parts of portfolio monitoring and vendor outreach, its AI agents are designed to save teams dozens of hours per month. * Manual Task: Reviewing over 100 vendors for new ransomware infections. (Estimated: 2-3 hours) * AI Agent Task with SecurityScorecard: "Show me which vendors in my 'Critical' portfolio have infection events from the last 30 days." (Estimated: 30 seconds) When you automate the "how," you can finally focus on the "why": You can shift from manual execution to measurable risk reduction. As one SecurityScorecard customer shared: "The reporting and rule builder agents are immediate opportunities for us. By using AI to filter out the noise, we can make our monitoring significantly more relevant to what we actually need to see." - Security Analyst at a major medical provider Data security, privacy, and AI governance. SecurityScorecard Inc. understand that data storage and privacy are important to its customers and SecurityScorecard Inc. take those needs seriously. * Agents are not trained on your input. SecurityScorecard Inc. use foundational third-party models. * Agents pull information available from the SecurityScorecard API within your subscription; their scope matches what you and other customers can manually extract. * Review SecurityScorecard's Artificial Intelligence Addendum here for details on the AI Features SecurityScorecard Inc. currently offer, data handling, your rights, and responsible AI governance. AI-generated outputs should be reviewed by qualified personnel before implementation and do not constitute professional advice. All AI actions require human approval. Use of AI Features is subject to its Terms of Service and Artificial Intelligence Addendum. Start automating Third-Party Risk Management today. You can now access these agents in the SecurityScorecard platform by selecting the purple sparkle in the bottom right corner or using the ChatSSC search bar at the top of the platform. Click on the purple sparkle icon in the bottom right corner to open the chat window and access the AI agents. You can also access the AI agents via the search bar. Stop checking boxes and start moving the needle. It's time to let the agents handle the manual effort so you can handle the strategy. Frequently asked questions. What are AI agents in Third-Party Risk Management? AI agents at SecurityScorecard automate tasks such as questionnaire analysis, rule-building, vendor monitoring, and remediation planning, reducing manual workload. How do AI agents improve vendor risk management? SecurityScorecard AI agents identify risks faster, automate reporting, and enable continuous monitoring across third- and fourth-party vendors. They also reduce the manual grind of TPRM. How do AI agents improve the accuracy and speed of security questionnaire management? The Questionnaire Gap Analysis Agent at SecurityScorecard significantly improves security questionnaire workflows by analyzing a questionnaire and identifying any issues in the responses. The AI force multiplier: scale your security team with Agents and automation. SecurityScorecard Inc. recently hosted a webinar to show its new AI agents - check it out below to see them in action!

Yahoo Finance
Mar 23rd, 2026
SecurityScorecard launches TITAN AI to cut third-party risk management work by 90%

SecurityScorecard has launched TITAN AI, an artificial intelligence-powered platform designed to automate third-party risk management. Announced at RSA Conference 2026, the system combines AI automation with threat intelligence to help organisations manage vendor and supply chain cyber risks. Built on SecurityScorecard's existing ratings platform, TITAN AI aims to reduce manual effort in vendor risk management, enabling teams to scale programmes without additional staff. The company claims the technology can help achieve up to 75% fewer supply chain breaches through continuous exposure identification and earlier remediation. The platform features 99.9% accurate risk attribution and creates a shared operational layer connecting enterprises and vendors for real-time collaboration on risk detection, assessment and remediation. TITAN AI replaces manual processes like spreadsheet management and assessment reviews with automated workflows.

Business Wire
Feb 20th, 2026
SecurityScorecard appoints former Maryland governor Larry Hogan to advisory board

SecurityScorecard, a global leader in third-party risk management, has appointed former Maryland Governor Larry Hogan to its advisory board. The move strengthens the company's position in helping public sector and critical infrastructure organisations manage cybersecurity risks. During his gubernatorial tenure, Hogan prioritised cybersecurity by establishing Maryland's first State Chief Information Security Officer role, launching the Maryland Information Sharing and Analysis Center, and convening the Annapolis Cybersecurity Summit. His "whole-of-state" approach made Maryland a national leader in coordinated cyber defence. SecurityScorecard provides continuous, threat-informed risk monitoring across vendor ecosystems. The company serves over 3,300 organisations, including 70% of the Fortune 100, and is recognised by the US Cybersecurity & Infrastructure Security Agency.

Business Wire
Feb 11th, 2026
SecurityScorecard sees 160% channel ARR growth as MAX partner programme expands globally

SecurityScorecard, a leader in third-party risk management, has reported triple-digit partner growth in 2025, with 160% year-over-year ARR growth across its channel programme and 126% increase in partner-led pipeline. The company now has over 600 partners worldwide, adding 35 new partners this year. The growth was driven by expansion of SecurityScorecard's SCORE Partner Programme and its MAX Service Delivery Partner Programme, which enables service providers to deliver managed third-party risk services. New MAX partners in 2025 include Uniqus Consultech, P3 Group, KPMG Canada and Crowe LLP, expanding coverage across Asia-Pacific, North America, Europe and the Middle East. SecurityScorecard also broadened its technology ecosystem, with MAX becoming available in the CrowdStrike Marketplace and new alliances with BlinkOps, AWS and WTW.

Life Insurance International
Feb 5th, 2026
Aon partners with SecurityScorecard to widen cyber risk offering

Aon partners with SecurityScorecard to widen cyber risk offering. Under the arrangement, SecurityScorecard's outside-in risk management tools will be made available alongside Aon's CyQu data platform. UK-based professional services provider Aon is collaborating with SecurityScorecard to extend the range of cyber risk services available to its clients. Under the arrangement, SecurityScorecard's outside-in risk management tools will be made available alongside Aon's CyQu platform, which the broker says provides actionable data to support decision-making. The combined package is designed to help organisations pinpoint publicly exposed domains and possible weaknesses, aiding preparation for cyber underwriting and supporting more data-driven assessments in the risk-transfer market. Aon cyber solutions global head Brent Rieth said: "By combining SecurityScorecard's external findings with the insights from CyQu and our consulting team, we are deepening visibility into clients' cyber risk posture, giving them the insights needed to make informed decisions in a dynamic insurance marketplace." Aon cited its 2025 Global Risk Management Survey, which found that cyber threats remain the top present and future concern for executives. It also noted that increased scrutiny from boards, regulators and shareholders is driving demand for stronger visibility and resilience planning. US tariffs are shifting - will you react or anticipate? Don't let policy changes catch you off guard. Stay proactive with real-time data and expert analysis. The company said its Cyber Solutions unit supports clients through proprietary platforms such as CyQu and the Cyber Risk Analyzer, together with its CyQu consulting team. Bringing these tools together with practitioner expertise is intended to give oragnisations a broader base for managing, mitigating and transferring cyber exposures. The partnership forms part of Aon's broader push to strengthen cyber risk evaluation and underwriting support worldwide. SecurityScorecard chief revenue officer Peter Jantzen added: "By collaborating with Aon, we are helping organisations move from point-in-time assessments to a more continuous, data-driven view of exposure that supports smarter risk and insurance decisions." Earlier this week, it reported net income attributable to shareholders of $1.7bn (£1.25bn) for the fourth quarter of 2025, up 136% from $716m a year earlier. Diluted earnings per share rose to $7.82 from $3.28 in the same period of 2024, while operating income increased 11% to $1.2bn. Last month, Aon also expanded its proprietary Data Centre Lifecycle Insurance Programme by $1bn, lifting total capacity to $2.5bn. The move came as investment accelerates in cloud computing, AI and digital infrastructure, alongside the growing scale and capital intensity of modern data centre projects.