Track Lead - IT security
United States
Job Description
Track Lead - IT security
Chicago, Illinois

Job Summary

Role Summary

The AI Product Owner will own the roadmap for security's AI-related products and controls — translating enterprise AI risk, governance, and compliance requirements into backlogs that engineering and architecture teams can execute against. This person is the primary bridge between security leadership, business stakeholders, and the technical delivery team for all AI security initiatives.

Key Responsibilities

  • Own and prioritize the product backlog for AI security initiatives (e.g., AI/ML risk assessment tooling, model governance workflows, AI usage monitoring, generative AI guardrails).
  • Translate enterprise security, privacy, and regulatory requirements (NIST AI RMF, ISO/IEC 42001, SOC 2, PCI, and applicable retail/data-privacy regulations) into actionable user stories and acceptance criteria.
  • Partner with Ulta's security leadership, enterprise AI/data science teams, legal, and risk functions to define product vision and success metrics for secure AI adoption.
  • Run sprint planning, backlog grooming, and release reviews with the AI Engineer and AI Architect roles; remove blockers and sequence delivery against business priority.
  • Define and track KPIs for AI security posture (e.g., model inventory coverage, risk assessments completed, vulnerabilities remediated, policy adoption).
  • Produce roadmap artifacts, status reporting, and executive-ready updates for security and technology leadership.
  • Evaluate and help select third-party AI security tooling and vendors in partnership with procurement and architecture.

Required Qualifications

  • 5+ years of product owner/product management experience, including 2+ years focused on AI/ML, data platforms, or security products.
  • Working knowledge of AI/ML lifecycle risk (model risk, data poisoning, prompt injection, adversarial inputs) and AI governance frameworks (NIST AI RMF, ISO/IEC 42001, EU AI Act awareness).
  • Experience working within a cybersecurity or GRC (governance, risk, compliance) organization.
  • Strong command of Agile/Scrum delivery, backlog management tools (Jira, Azure DevOps), and stakeholder communication at both technical and executive levels.
  • Retail, e-commerce, or consumer-facing enterprise experience is a plus.

Preferred Qualifications

  • CSPO/CSM or equivalent Agile certification.
  • Security certifications (CISSP, CISM, or Security+) or AI governance credentials (e.g., AIGP).
  • Prior experience standing up an AI governance or AI security program from the ground up.

 

 

Key Responsibilities

Role Summary

The AI Product Owner will own the roadmap for security's AI-related products and controls — translating enterprise AI risk, governance, and compliance requirements into backlogs that engineering and architecture teams can execute against. This person is the primary bridge between security leadership, business stakeholders, and the technical delivery team for all AI security initiatives.

Key Responsibilities

  • Own and prioritize the product backlog for AI security initiatives (e.g., AI/ML risk assessment tooling, model governance workflows, AI usage monitoring, generative AI guardrails).
  • Translate enterprise security, privacy, and regulatory requirements (NIST AI RMF, ISO/IEC 42001, SOC 2, PCI, and applicable retail/data-privacy regulations) into actionable user stories and acceptance criteria.
  • Partner with Ulta's security leadership, enterprise AI/data science teams, legal, and risk functions to define product vision and success metrics for secure AI adoption.
  • Run sprint planning, backlog grooming, and release reviews with the AI Engineer and AI Architect roles; remove blockers and sequence delivery against business priority.
  • Define and track KPIs for AI security posture (e.g., model inventory coverage, risk assessments completed, vulnerabilities remediated, policy adoption).
  • Produce roadmap artifacts, status reporting, and executive-ready updates for security and technology leadership.
  • Evaluate and help select third-party AI security tooling and vendors in partnership with procurement and architecture.

Required Qualifications

  • 5+ years of product owner/product management experience, including 2+ years focused on AI/ML, data platforms, or security products.
  • Working knowledge of AI/ML lifecycle risk (model risk, data poisoning, prompt injection, adversarial inputs) and AI governance frameworks (NIST AI RMF, ISO/IEC 42001, EU AI Act awareness).
  • Experience working within a cybersecurity or GRC (governance, risk, compliance) organization.
  • Strong command of Agile/Scrum delivery, backlog management tools (Jira, Azure DevOps), and stakeholder communication at both technical and executive levels.
  • Retail, e-commerce, or consumer-facing enterprise experience is a plus.

Preferred Qualifications

  • CSPO/CSM or equivalent Agile certification.
  • Security certifications (CISSP, CISM, or Security+) or AI governance credentials (e.g., AIGP).
  • Prior experience standing up an AI governance or AI security program from the ground up.

 

 

Skill Requirements

Role Summary

The AI Product Owner will own the roadmap for security's AI-related products and controls — translating enterprise AI risk, governance, and compliance requirements into backlogs that engineering and architecture teams can execute against. This person is the primary bridge between security leadership, business stakeholders, and the technical delivery team for all AI security initiatives.

Key Responsibilities

  • Own and prioritize the product backlog for AI security initiatives (e.g., AI/ML risk assessment tooling, model governance workflows, AI usage monitoring, generative AI guardrails).
  • Translate enterprise security, privacy, and regulatory requirements (NIST AI RMF, ISO/IEC 42001, SOC 2, PCI, and applicable retail/data-privacy regulations) into actionable user stories and acceptance criteria.
  • Partner with Ulta's security leadership, enterprise AI/data science teams, legal, and risk functions to define product vision and success metrics for secure AI adoption.
  • Run sprint planning, backlog grooming, and release reviews with the AI Engineer and AI Architect roles; remove blockers and sequence delivery against business priority.
  • Define and track KPIs for AI security posture (e.g., model inventory coverage, risk assessments completed, vulnerabilities remediated, policy adoption).
  • Produce roadmap artifacts, status reporting, and executive-ready updates for security and technology leadership.
  • Evaluate and help select third-party AI security tooling and vendors in partnership with procurement and architecture.

Required Qualifications

  • 5+ years of product owner/product management experience, including 2+ years focused on AI/ML, data platforms, or security products.
  • Working knowledge of AI/ML lifecycle risk (model risk, data poisoning, prompt injection, adversarial inputs) and AI governance frameworks (NIST AI RMF, ISO/IEC 42001, EU AI Act awareness).
  • Experience working within a cybersecurity or GRC (governance, risk, compliance) organization.
  • Strong command of Agile/Scrum delivery, backlog management tools (Jira, Azure DevOps), and stakeholder communication at both technical and executive levels.
  • Retail, e-commerce, or consumer-facing enterprise experience is a plus.

Preferred Qualifications

  • CSPO/CSM or equivalent Agile certification.
  • Security certifications (CISSP, CISM, or Security+) or AI governance credentials (e.g., AIGP).
  • Prior experience standing up an AI governance or AI security program from the ground up.

 

 

Other Requirements

Role Summary

The AI Product Owner will own the roadmap for security's AI-related products and controls — translating enterprise AI risk, governance, and compliance requirements into backlogs that engineering and architecture teams can execute against. This person is the primary bridge between security leadership, business stakeholders, and the technical delivery team for all AI security initiatives.

Key Responsibilities

  • Own and prioritize the product backlog for AI security initiatives (e.g., AI/ML risk assessment tooling, model governance workflows, AI usage monitoring, generative AI guardrails).
  • Translate enterprise security, privacy, and regulatory requirements (NIST AI RMF, ISO/IEC 42001, SOC 2, PCI, and applicable retail/data-privacy regulations) into actionable user stories and acceptance criteria.
  • Partner with Ulta's security leadership, enterprise AI/data science teams, legal, and risk functions to define product vision and success metrics for secure AI adoption.
  • Run sprint planning, backlog grooming, and release reviews with the AI Engineer and AI Architect roles; remove blockers and sequence delivery against business priority.
  • Define and track KPIs for AI security posture (e.g., model inventory coverage, risk assessments completed, vulnerabilities remediated, policy adoption).
  • Produce roadmap artifacts, status reporting, and executive-ready updates for security and technology leadership.
  • Evaluate and help select third-party AI security tooling and vendors in partnership with procurement and architecture.

Required Qualifications

  • 5+ years of product owner/product management experience, including 2+ years focused on AI/ML, data platforms, or security products.
  • Working knowledge of AI/ML lifecycle risk (model risk, data poisoning, prompt injection, adversarial inputs) and AI governance frameworks (NIST AI RMF, ISO/IEC 42001, EU AI Act awareness).
  • Experience working within a cybersecurity or GRC (governance, risk, compliance) organization.
  • Strong command of Agile/Scrum delivery, backlog management tools (Jira, Azure DevOps), and stakeholder communication at both technical and executive levels.
  • Retail, e-commerce, or consumer-facing enterprise experience is a plus.

Preferred Qualifications

  • CSPO/CSM or equivalent Agile certification.
  • Security certifications (CISSP, CISM, or Security+) or AI governance credentials (e.g., AIGP).
  • Prior experience standing up an AI governance or AI security program from the ground up.

 

 

Maximum Salary (US): 
Minimum Salary (US): 
Information at a Glance

Why HCLTech?

At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion. 

 

Compensation and Benefits

A candidate’s pay within the range will depend on their skills, experience, education, and other factors permitted by law. This role may also be eligible for performance-based bonuses subject to company policies. In addition, this role is eligible for the following benefits subject to company policies: medical, dental, vision, pharmacy, life, accidental death & dismemberment, and disability insurance; employee assistance program; 401(k) retirement plan; 10 days of paid time off per year (some positions are eligible for need-based leave with no designated number of leave days per year); and 10 paid holidays per year.