Technical Product Manager - Authorization Tooling - CTO Office

The CTO Security Service Infrastructure group solves complex systems problems, enabling engineers to quickly ship new products and prototype the next generation of infrastructure security technologies. The team's goal is to define the future of how they secure Bloomberg's infrastructure.

What You Will Do

As a product owner, you'll be trusted to understand the intersections between Bloomberg's global technology footprint, unique software stack, and security requirements. You'll provide guidance for usable infrastructure security, ensure logical security controls are manageable at scale, and more.

Why It Might Be a Fit

You'll lead the creation of roadmaps, metrics, and OKRs, and contribute to the overall strategy and vision for authorization across the firm. You'll need to have 7+ years of experience building, maintaining, and managing security aspects of large-scale, distributed infrastructure and applications.

Requirements

• 7+ years of experience building, maintaining, and managing security aspects of large-scale, distributed infrastructure and applications
• Strong experience with authorization and access control technologies with an emphasis on security, integration, and automation
• Sufficient technical depth to understand how systems interact, how different technologies and access models differ, and what those differences mean for the underlying authorization tooling
• A track record of building collaborative relationships with stakeholders across many functions, with a focus on correctness, scalability, and usability of distributed infrastructure
• A long history of leading through influence and establishing consensus for execution
• Ability to collect and document detailed product requirements, including RFCs, design rationale, and decision making
• The experience of knowing when to build, buy, or re-use
• Deep knowledge of authorization and access control concepts and standards and how they are adopted in large enterprises
• Demonstrated polished written and oral communication skills, in a variety of circumstances (from presenting to audiences through to 1:1 communication)
• Ability to build proof-of-concept solutions and prototype approaches, and to partner with engineering teams to drive adoption
• Experience and knowledge of handling regulatory requirements such as GDPR, DORA, and HIPAA
• Experience integrating with and securing a combination of in-house developed and third-party solutions

Benefits

• Benefits + Bonus
• Paid holidays
• Paid time off
• Medical
• Dental
• Vision
• Short and long term disability benefits
• 401(k) + match
• Life insurance
• Various wellness programs