Advanced Specialist, Product Management
Pearson · United States
Advanced Specialist Product Manager – Test Security Platforms
Summary
Pearson Professional Assessments delivers the exam and testing ecosystem that professional bodies, regulators, certification programmes and schools depend on to make high-stakes decisions about people. Security is not a feature of that service. It is the service.
The role is accountable for five security domains: Identity, Behavior, Location, Platform and Environment - and for the platforms and shared services that deliver them, across market-facing and internal applications alike. It includes the security capability roadmap for the online-proctored channel.
The role exists because our security capability today is strong but application-shaped. Controls have grown up inside individual products, driven largely by what individual clients asked for, and the same problem has been solved more than once in more than one place. We are moving to a model where security is a deliberately designed shared platform, built from a standing read of the threat landscape and the market rather than from inbound requirements.
Key responsibilities
Domain and platform product ownership
Own a persistent, outcome-based roadmap for each of the five domains — refreshed continuously against evidence, not reset annually by the project cycle.
Design security as a shared platform. Define the capabilities, service contracts and integration patterns that channel and application teams consume, so a control is built once and applied everywhere it is needed.
Maintain a live capability gap analysis by domain. Be able to answer, at any time, which assurance is weakest and what it would take to close it.
Market intelligence and outside-in discovery
Build and maintain a standing view of the exam security threat landscape — AI-assisted cheating, proxy testing, content harvesting, organised fraud, emerging spoofing techniques — and use it as the primary input to the roadmap.
Track competitor and adjacent-industry capability deliberately and continuously. Know where we lead, match or lag, by domain, and say so plainly.
Run continuous discovery with candidates, proctors, test centre staff, client programme owners, and our own forensics and operations teams. Discovery is a habit, not a phase at the start of a project.
Convert single-client requests into capabilities that serve the whole book of business. Decline bespoke security work with a reasoned, evidenced alternative rather than a refusal.
Evidence, measurement and model performance
Instrument every control. Own the metrics that show whether a capability is actually working: detection rate, precision and recall, false-positive burden, appeal and overturn rates, candidate and proctor impact.
Partner with data science and analytics on AI and ML-based detection. Set the performance bar, own the precision/recall position, and understand what both error directions cost a real candidate.
Ensure the evidence a control produces is defensible — capable of standing up to candidate appeal, client scrutiny, regulator questions and legal challenge. A detection we cannot evidence is not a detection.
Close the loop: forensics findings, incident reviews and result holds from live delivery feed straight back into the roadmap.