Who We Are

Join a team that puts its People First! Since 1889, First American (NYSE: FAF) has held an unwavering belief in its people. They are passionate about what they do, and we are equally passionate about fostering an environment where all feel welcome, supported, and empowered to be innovative and reach their full potential. Our inclusive, people-first culture has earned our company numerous accolades, including being named to the Fortune 100 Best Companies to Work For® list for eleven consecutive years. We have also earned awards as a best place to work for women, diversity and LGBTQ+ employees, and have been included on more than 50 regional best places to work lists. First American will always strive to be a great place to work, for all. For more information, please visit www.careers.firstam.com.

What We Do

Product Management within Information Security defines, maintains, and communicates the strategic roadmap for security platforms and capabilities, with a focus on ServiceNow-based solutions. This role partners closely with internal stakeholders across Security Operations, Vulnerability Management, Risk & Compliance, IT, and Engineering to understand business processes, security risks, and operational challenges.

The Product Manager identifies opportunities to enhance security posture through platform capabilities, integrations, and workflow automation. Responsibilities include gathering requirements, defining specifications, managing the product roadmap, and ensuring successful delivery of secure, scalable, and efficient solutions within the ServiceNow ecosystem.

Acts as the primary liaison between Information Security and technical delivery teams, ensuring solutions align with enterprise security strategy, regulatory requirements, and operational needs. Drives adoption, usability, and continuous improvement of security products and services.

HOW YOU’LL CONTRIBUTE

• Translate Information Security strategy into detailed product and platform requirements, with a focus on ServiceNow modules (e.g., IRM, SecOps, VR, GRC).
• Drive ongoing advancement of the security product roadmap by partnering with internal stakeholders (Security Operations, Vulnerability Management, Risk & Compliance, IT, Engineering) to identify needs, gaps, and opportunities.
• Own and prioritize backlog for ServiceNow enhancements, including updates, integrations, and customizations aligned to security use cases.
• Execute the roadmap by providing clear direction to development and platform teams, ensuring solutions reflect operational feedback, security priorities, and regulatory requirements.
• Define and document end-to-end workflows, data models, and integrations across security tools and enterprise systems.
• Gather and analyze user feedback, operational metrics, and audit findings to continuously improve platform effectiveness and user experience.
• Ensure alignment of product capabilities with security frameworks (e.g., NIST, ISO, CIS) and internal policies.
• Evaluate and recommend enhancements, automation opportunities, and new capabilities to improve efficiency, risk visibility, and response times.
• Partner with engineering teams to design and implement integrations between ServiceNow and security tools (e.g., vulnerability scanners, cloud compliance platforms, identity platforms).
• Define success metrics (KPIs/KRIs) and track performance of security products and workflows.
• Support governance processes including change management, risk assessments, and control validation related to platform updates.
• Act as a subject matter expert for ServiceNow security modules and advocate for best practices in platform configuration and usage.

WHAT YOU’LL BRING

Required Education, Experience, Certification/Licensure

• Bachelor’s degree or equivalent combination of education and experience
• 5+ years of experience in product management, platform management, or security engineering
• Experience working with ServiceNow, preferably in SecOps, Vulnerability Response, IRM/GRC, or related modules

KNOWLEDGE, SKILLS, AND ABILITIES (KSAs)

• Strong understanding of Information Security domains (e.g., vulnerability management, incident response, risk & compliance)
• Experience defining requirements, workflows, and integrations for enterprise platforms
• Ability to translate complex security and technical concepts into clear requirements and actionable plans
• Experience working in cross-functional, highly matrixed environments
• Strong communication skills with the ability to engage technical and non-technical stakeholders
• Analytical and problem-solving skills with a focus on risk-based decision making
• Famil