Senior Security Technical Program Manager

Role overview

Manage security programs and improve the operational processes that help an organization identify, prioritize, and resolve security issues. A central focus is owning the full lifecycle of security findings, from intake and risk assessment to accountable handoff, independent validation, closure, and leadership reporting. The role also leads cloud governance work and builds metrics-driven plans with security and business stakeholders.

Responsibilities

- Oversee security initiatives and manage the findings workflow in Jira, including triage, prioritization, ownership, due dates, escalation, validation, and reporting. - Assess issues against risk factors such as exploitability, potential impact, data sensitivity, regulatory relevance, and existing controls. - Drive timely action on critical and high-priority findings, notify leaders when needed, and resolve blockers and cross-team dependencies. - Ensure findings have documented causes, recommended fixes, affected systems, and verifiable completion criteria before handoff. - Run recurring cross-functional reviews, track slippage, resolve disagreements, and close issues only after independent security validation. - Lead cloud governance initiatives, develop program plans and performance measures, and report progress to leadership and stakeholders.

Requirements

- Experience managing a security findings, vulnerability, or audit remediation program across multiple engineering and business teams, through verified closure. - Ability to apply structured risk-scoring methods consistently and explain prioritization decisions to stakeholders. - Proven skill driving accountability across teams, including formal handoffs, acceptance, and escalation. - Hands-on experience with Jira workflows, JQL, and dashboards for tracking and reporting. - Working knowledge of compliance frameworks and audit evidence, such as SOC 2 or ISO 27001. - Strong stakeholder management, risk evaluation, and problem-solving skills, including in a fast-changing environment. - Experience with security or cloud software solutions.

Nice to have

- Security or program management certification, such as CISA, CISSP, or PMP. - Experience with cloud security posture management or policy-as-code controls in AWS, Azure, or GCP. - Experience using automation or AI to improve finding triage, validation, or reporting.