Advanced Specialist, Product Management

Advanced Specialist Product Manager – Test Security Platforms

Summary

Pearson Professional Assessments delivers the exam and testing ecosystem that professional bodies, regulators, certification programmes and schools depend on to make high-stakes decisions about people. Security is not a feature of that service. It is the service.

The role is accountable for five security domains: Identity, Behavior, Location, Platform and Environment - and for the platforms and shared services that deliver them, across market-facing and internal applications alike. It includes the security capability roadmap for the online-proctored channel.

The role exists because our security capability today is strong but application-shaped. Controls have grown up inside individual products, driven largely by what individual clients asked for, and the same problem has been solved more than once in more than one place. We are moving to a model where security is a deliberately designed shared platform, built from a standing read of the threat landscape and the market rather than from inbound requirements.

Key responsibilities

Domain and platform product ownership

• Own a persistent, outcome-based roadmap for each of the five domains — refreshed continuously against evidence, not reset annually by the project cycle.

• Design security as a shared platform. Define the capabilities, service contracts and integration patterns that channel and application teams consume, so a control is built once and applied everywhere it is needed.

• Maintain a live capability gap analysis by domain. Be able to answer, at any time, which assurance is weakest and what it would take to close it.

Market intelligence and outside-in discovery

• Build and maintain a standing view of the exam security threat landscape — AI-assisted cheating, proxy testing, content harvesting, organised fraud, emerging spoofing techniques — and use it as the primary input to the roadmap.

• Track competitor and adjacent-industry capability deliberately and continuously. Know where we lead, match or lag, by domain, and say so plainly.

• Run continuous discovery with candidates, proctors, test centre staff, client programme owners, and our own forensics and operations teams. Discovery is a habit, not a phase at the start of a project.

• Convert single-client requests into capabilities that serve the whole book of business. Decline bespoke security work with a reasoned, evidenced alternative rather than a refusal.

Evidence, measurement and model performance

• Instrument every control. Own the metrics that show whether a capability is actually working: detection rate, precision and recall, false-positive burden, appeal and overturn rates, candidate and proctor impact.