Digital Product Manager - Cybersecurity & Controls

Who is Allstate: 
Allstate Insurance Company of Canada is a leading home and auto insurer focused on providing its customers prevention and protection products and services for every stage of life. Serving Canadians since 1953, Allstate strives to reassure both customers and employees with its “You’re in Good Hands®” promise and is proud to have been named a Best Employer in Canada for nine consecutive years. Allstate is committed to making a positive difference in the communities in which it operates through partnerships with charitable organizations, employee giving and volunteerism. To learn more, visit www.allstate.ca. For safety tips and advice, visit www.goodhandsadvice.ca.  

Through our Employee Value Proposition, we have worked hard to develop and nurture a culture where employees feel valued, experience personal growth, have career options and truly enjoy the work they do.  

Role Designation: Remote
 

Benefits to joining Allstate 

• Flexible Work Arrangements.  

• Employee discounts (15% on auto and property insurance, plus many other products and services).  

• Good Office program (receive up to $400 back after purchasing office equipment).  

• Student Loan Payment Matching Program for Government Student loans.  

• Comprehensive Retirement Savings Program with employer matched contributions.  

• Annual Wellness allowance to support employees with improving health and wellbeing.  

• Personal days.  

• Tuition Reimbursement.  

• Working within the community and giving back.  

The Digital Product Manager (DPM) for Cybersecurity & Controls is responsible for defining and delivering products that enable secure-by-design technology, strengthen control effectiveness, and reduce enterprise risk. This role owns the end-to-end lifecycle of cybersecurity control platforms, translating enterprise risk priorities, threat scenarios, and regulatory requirements into scalable, measurable, and actionable product capabilities.

Accountabilities

Product Strategy & Roadmap

• Define, drive, and execute product strategy and roadmap for cybersecurity and control platforms.

• Translate enterprise risk priorities, threat scenarios, and regulatory requirements into product capabilities and control solutions.

• Ensure alignment between product outcomes, risk reduction, and business resilience objectives.

Customer & Stakeholder Engagement

• Act as the voice of the customer, representing the needs of control owners, engineers, risk partners, and business stakeholders.

• Engage in continuous discovery, test-and-learn, and feedback loops to validate assumptions and refine product direction.

• Build strong partnerships across Product Security, Cyber Operations, Technology Risk, and engineering teams.

Product Delivery & Execution

• Decompose complex problems into manageable work items and maintain a prioritized product backlog.

• Lead iterative, outcome-based delivery using agile and test-and-learn methodologies.

• Provide clear direction, timely feedback, and alignment across cross-functional teams.

Controls & Risk Integration

• Ensure controls are designed with clear linkage to risk scenarios, exposure conditions, and business outcomes.

• Enable standardized control onboarding, lifecycle management, and adoption across domains (cyber, data, AI, third-party, resilience).

• Integrate control capabilities into engineering workflows and enterprise platforms.

Metrics, Measurement & Insights

• Define and manage KPIs to measure:

  • Control effectiveness

  • Risk reduction and exposure trends

  • Product adoption and usage

• Drive automation of measurement, evidence collection, and reporting.

• Deliver decision-grade insights to inform prioritization and executive reporting.

Leadership & Influence

• Influence strategic decisions through data-driven insights and clear product narratives.

• Coach and mentor team members and cross-functional partners on product management practices.

• Promote a culture of accountability, continuous improvement, and customer-centric delivery.

Qualifications

Experience

• 5+ years of experience in Digital Product Management or related roles.

• Proven experience delivering complex, enterprise-scale products or platforms.

• Demonstrated ability to lead cross-functional initiatives and drive outcomes.

Core Capabilities

• Strong product management fundamentals (strategy, roadmap, backlog, delivery).

• Experience with iterative, outcome-based delivery and KPI-driven execution.

• Ability to decompose complex problems and deliver scalable, structured solutions.

• Strong stakeholder management and communication skills.

Cybersecurity & Controls Expertise (Preferred)

• Familiarity with security control frameworks (e.g., NIST, ISO, Zero Trust).

• Understanding of control design, automation, and lifecycle management.

• Experience with risk management, governance, or secure engineering practices.

• Exposure to DevSecOps, cloud security, or enterprise platform environments.

Supervisory Responsibilities

• This role does not have direct supervisory responsibilities but requires strong cross-functional leadership and influence.

What Success Looks Like

• Clear, actionable product roadmap aligned to cybersecurity risk priorities

• Measurable improvements in control coverage, effectiveness, and risk posture

• High adoption of control platforms across engineering and business teams

• Real-time visibility into cybersecurity risk and control performance