Technical Program Manager, Product Trust

What You'll Do

• Manage the end-to-end security and compliance review process for new features, including intake / planning, resource engagement, performing risk analysis, documenting trade-off decisions, and ensuring critical requirements for information security and AI risks (model behavior, safety, regulatory exposure) are addressed.
• Act as a representative for the Security team to cross-functional teams and leadership, synthesizing risk reviews and threat models into formal security risk narratives and reports before major launches.
• Collaborate with Product Security and Infrastructure Security teams to integrate new Product Trust requirements and drive improvements into engineering, release, and change management processes.
• Develop customer-facing security and privacy enablement content (e.g., materials, FAQs, positioning), attend customer security review calls, and manage technical security escalations from major customers.
• Lead audit and certification readiness projects for key features and teams.
• Support and address other priority Trust, Risk, and Compliance initiatives as they are prioritized.

What You Have

• 7+ years in Information Security, with significant program management experience in product or engineering contexts — ideally including roles where you defined and built programs, not just maintained them.
• A strong foundation across a broad range of AI Governance, Risk, and Safety (AI GRS) implications, security, and compliance topics.
• 1-2+ years experience leveraging AI models to drive program efficiencies (e.g., automating risk assessment or compliance gap analysis).
• Proven ability to communicate complex technical and regulatory topics and write strong technical compliance requirements for diverse audiences (engineers, lawyers, customers, and GTM).
• Excellent organizational skills, including the ability to manage external contractors and vendors.
• A customer-centric mindset with a drive for process simplification.
• A builder's mindset and comfort with ambiguity — Harvey ships fast, the AI regulatory landscape is still being written, and this role requires both strong judgment and the ability to create structure where none yet exists.