Remote

Principal Product Manager - AI & Platform Innovation

Avaya
United States
Nov 06, 2026
About Avaya Avaya is an enterprise software leader that helps the world's largest organizations and government agencies forge unbreakable connections. The Avaya Infinity platform unifies fragmented customer experiences, connecting the channels, insights, technologies, and workflows that together create enduring customer and employee relationships. We believe success is built through strong connections - with each other, with our work, and with our mission. At Avaya, you'll find a community that values your contributions and supports your growth every step of the way. Learn more at https://www.avaya.com About the Role Avaya is expanding its compliance, data governance, and enterprise security posture to delivermarket leading data protection across global public sector and commercial enterpriseenvironments. We are seeking a Product Manager to lead the product strategyand executionfor Data Privacy, Security, and Regulatory Compliance, with a dedicated focus on achieving andmaintaining FedRAMP Class Cauthorization and sovereign cloud standards. In this role, you will partner with Product, Engineering, Information Security, and Architecture totranslate complex regulatory mandates into scalable platform capabilities across the AvayaInfinity ecosystem. Your scope spans identity and access governance, boundary protection,cryptographic standards, data sovereignty, and real time privacy controls across ourcommunications and AI pipelines. Note: Due to the federal compliance and FedRAMP requirements associated with this position,candidates must be U.S. Citizens residing in the United States. What You'll Do Define the Compliance & Security Roadmap:Lead the multiyear product roadmapfor Data Privacy, Security, and Federal Compliance, establishing FedRAMP Class C readiness and global regulatory adherence (e.g., GDPR, HIPAA) as core commercial differentiators. Drive FedRAMP Class C Execution: Partner with InfoSec, compliance officers, and3PAO assessors to define system authorization boundaries, and prioritize engineering items required for Authority to Operate (ATO) and continuous monitoring (ConMon). Embed PrivacybyDesign in AI & Analytics:Design scalable data privacy controls including automated PII/PHI redaction, data tokenization, role/attributebased access control (RBAC/ABAC), and consent trackingfor realtime conversation intelligence,agent assistance, and LLMdriven summaries. Architect Trust Boundaries & Data Governance:Collaborate with Architecture andCore Platform teams to implement zerotrust principles, cryptographic standards (FIPS 140 validation), key management (BYOK), and strict data residency across commercialand GovCloud environments. Manage Technical Tradeoffs & Mitigations:Balance rigorous compliance controlsagainst platform latency, cost, and user experience. Customer & Auditor Engagement:Serve as the product authority for complianceinquiries, enterprise security assessments, and federal agency reviews, translating dense technical standards into clear capability roadmaps. What We're Looking For Technical Product Leadership:Product management experience focused onenterprise cloud security, compliance, data privacy, or infrastructureasaservice/SaaS platforms. Federal & Regulated Domain Expertise:Demonstrated knowledge of federalaccreditation frameworks, specificallyFedRAMP Class C / High impact securitybaselinesNIST SP 80053 (Rev 5), FISMA, and Zero Trust Architecture (NIST SP 800207). Privacy & Governance Acumen:Solid foundation in enterprise privacy regulations (GDPR, HIPAA) and security trust frameworks (SOC 2 Type II, ISO 27001). Execution in Ambiguity:Ability to deconstruct vague, evolving regulatory requirementsinto crisp product specs, acceptance criteria, and actionable user stories for engineeringteams. CrossFunctional Influence:Proven track record aligning engineering, legal, InfoSec,external auditors (3PAO), and executive stakeholders around technical roadmaps and audit timelines. Eligibility Requirement:U.S. Citizenship based in the continental United States. Experience That Would Be Particularly Valuable Handson FedRAMP Accreditation:Direct experience taking an enterprise SaaS orPaaS product through the FedRAMP Class C lifecyclefrom Readiness Assessment and Initial Agency Review to ATO grant and continuous monitoring. AI/ML Data Compliance:Familiarity with the unique compliance and governance risksintroduced by generative AI, such as training data provenance, inference boundary isolation, and prompt/response data sanitization. Modern Lakehouse & Cloud Ecosystems:Technical familiarity with data architectures(e.g., Databricks, Snowflake, Apache Iceberg) and cloud providers (Google GCP, Microsoft Azure) deployed inside compliant enclaves. CCaaS / Interaction Data Background:Direct exposure to contact center systems,VoIP/SIP encryption, telecommunications metadata, customer experience (CX) analytics, or omnichannel event streams. Industry Certifications:Relevant certifications such as CISSP, CISM, CIPP/US, orCIPT. What Success Looks Like Within your first 90 days, you will conduct a baseline audit of Avaya Infinity's compliance llandscape, identify the critical feature and architecture gaps required for FedRAMP Class Calignment, and publish a prioritized, phased compliance roadmap. Over the following quarters,you will work handinhand with engineering to establish system boundaries, deliver nativeprivacyenhancing controls for our AI products, and ensure all FedRAMP Class C evidence andcontrols pass thirdparty assessmentunlocking major public sector adoption while reinforcingenterprise trust worldwide. Experience 7 - 10 Years of Experience Education Bachelor degree or equivalent experience Footer Applicants must be currently authorized to work in the United States without the need for visa sponsorship now or in the future. Avaya is an Equal Opportunity employer and a U.S. Federal Contractor. Our commitment to equality is a core value of Avaya. All qualified applicants and employees receive equal treatment without consideration for race, religion, sex, age, sexual orientation, gender identity, national origin, disability, status as a protected veteran or any other protected characteristic. In general, positions at Avaya require the ability to communicate and use office technology effectively. Physical requirements may vary by assigned work location. This job brief/description is subject to change. Nothing in this job description restricts Avaya right to alter the duties and responsibilities of this position at any time for any reason.