Senior Program Manager Security Engineering

Kong; Toronto; Hybrid; CAD 100,000 - 130,000; Full time

Job summary

A leading tech company is seeking a Sr. Technical Program Manager to join their Cybersecurity team. You'll lead various cybersecurity initiatives and manage programs across the organization. Ideal candidates should have a background in Cybersecurity or Information Security, excellent project management skills, and the ability to communicate effectively with both technical and non-technical stakeholders. The position is hybrid-friendly, requiring some travel and occasional on-call availability.

Qualifications

• 5+ years of experience in Cloud Risk Management, Cybersecurity, or related fields.
• 5+ years in a Technical Program Manager or similar role.
• Experience with security frameworks, risk management, and program delivery.

Responsibilities

• Lead and manage Cybersecurity Programs across OCISO.
• Collaborate with engineering and product teams to define and deliver solutions.
• Stay current on regulatory standards to inform risk strategies.

Skills

Information Security experience

Program and project management skills

Communication skills

Stakeholder engagement

Problem-solving

Education

Bachelor’s degree in Computer Science or Information Technology

Job description

Are you ready to power the World's connections?

If you don’t think you meet all of the criteria below but are still interested in the job, please apply. Nobody checks every box - we’re looking for candidates that are particularly strong in a few areas, and have some interest and capabilities in others.

We are seeking a dynamic, well-rounded Sr. Technical Program Manager (TPM) to join our Cybersecurity team within the Office of the Chief Information Security Officer (OCISO) at Kong. The ideal candidate for this role is a TPM who can support a broad range of cybersecurity initiatives across the Kong from risk management and compliance automation to security operations and technical delivery.

The ideal candidate will bring experience working on an Information Security or Cybersecurity team, with a strong understanding of security frameworks, risk management, and technical program delivery. Certifications such as CISSP, CISM, or equivalent are desirable.

Primary Responsibilities

• Lead and manage Kong Cybersecurity Programs across OCISO


• Establish, develop and track KPIs


• Collaborate with engineering, product, and business stakeholders to define, prioritize, and deliver technical solutions.


• Present complex technical challenges and resolutions to leadership and stakeholders.


• Stay current on regulatory and industry standards (for example, ISO 27001, PCI-DSS, FedRAMP, NIST 800-53) to inform risk and control strategies.


• Build strategies for issue and risk mitigation, contingency planning, and compliance adherence.


• Demonstrate ownership and autonomy in managing programs and delivering high-quality results.

Knowledge, Skills, And Abilities

• Experience working on an Information Security or Cybersecurity team.


• Strong program and project management skills with a deep understanding of security and audit frameworks (e.g., SOC 2, PCI, ISO, FedRAMP).


• Ability to bridge the gap between Product, Engineering, and Architecture to facilitate solutions.


• Excellent communication, stakeholder engagement, and organizational skills.


• Technical credibility to engage with engineers and understand infrastructure, cloud, and network security.


• Ability to influence across teams and drive alignment in a complex, matrixed environment.


• Comfortable navigating ambiguity and solving complex problems with a proactive mindset.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.


• 5+ years of experience in Cloud Risk Management, Cybersecurity, or related fields.


• 5+ years in a Technical Program Manager or similar role.


• Preferred certifications: CISSP, CISM, CRISC, CISA, CGEIT, PMP.

Work Environment

• Hybrid-friendly with occasional travel


• May require occasional on-call availability and work outside standard hours.

About Kong

Kong Inc., a leading developer of API and AI connectivity technologies, is building the infrastructure that powers the agentic era. Trusted by the Fortune 500 and startups alike, Kong's unified API and AI platform, Kong Konnect, enables organizations to secure, manage, accelerate, govern, and monetize the flow of intelligence across APIs and AI models. For more information, visit www.konghq.com.