Autodesk is a leader in software solutions for design and manufacturing. They are seeking a Product Security Compliance Manager to enhance security and compliance across their product portfolio, guiding teams through regulatory requirements and ensuring alignment with trust standards.
Responsibilities:
- Partner with Product Security Developers, security, product, and engineering teams to align security and privacy requirements with product architecture across desktop, hybrid cloud, and cloud-based products
- Lead and coordinate regulated compliance efforts such as ITAR and FedRAMP (including GovCloud deployments), supporting engineering teams through readiness, assessment, authorization, and ongoing compliance
- Translate regulatory, audit, security, privacy, resiliency, and Trusted AI requirements into clear, actionable guidance for product and engineering teams
- Collaborate across organizational boundaries with the corporate Trust organization to ensure alignment with enterprise trust standards, objectives, and reporting
- Lead cross-functional working groups for trust excellence and product certifications, participate in regionalization working groups, and contribute to continuous improvement initiatives
- Support the implementation and ongoing maintenance of internal Trust requirements, aligned with SOC 2, ISO/IEC 27001, and NIST SP 800-53–aligned controls
- Track and report on product trust commitments across security, privacy, availability, resilience, and recoverability
- Coordinate audits, government assessments, and customer security or compliance reviews
- Support security testing activities, security awareness efforts, incident response follow-up, business continuity considerations, and trust documentation
Requirements:
- Bachelor's degree in Cybersecurity, Computer Information Systems, or a related field
- 4–6 years of experience in product security, security compliance, risk management, or trust-related roles
- Experience supporting engineering teams through ITAR, FedRAMP, and/or GovCloud compliance or certification efforts
- Knowledge of Secure Software Development Lifecycle (SSDLC) processes and best practices
- Understanding of information security risks and controls across application, data, infrastructure, and enterprise systems, preferably in cloud or hybrid environments (e.g., AWS)
- Familiarity with security and privacy frameworks and regulations such as SOC 2, NIST SP 800-53, ISO/IEC 27001, GDPR, and CCPA
- Experience working with engineering and security teams in a matrixed organization
- Strong communication, organizational, and documentation skills
- Desire to continue to learn and challenge yourself
- Able to travel as required (less than 25%)
- US Citizenship required
- CISSP, FedRAMP Practitioner, or CCSP certification
- Experience working with desktop software and cloud-connected or hybrid products
- Familiarity with regulated environments, data residency, or regionalization requirements
- Experience supporting audits, penetration testing, or vulnerability management programs