Technical Program Manager, Security Assurance

Delinea; Ciudad de México; Hybrid; MXN 900,000 - 1,300,000; Full time

Benefits offered by this job

Healthcare benefits

Pension/retirement matching

Paid time off

Job summary

Delinea, based in Mexico City, seeks a seasoned Technical Program Manager to lead Governance, Risk, and Compliance (GRC), Internal Assurance, and Offensive Security programs. This hybrid role partners with the Deputy CISO to drive strategic initiatives across engineering, legal, and security teams.

The ideal candidate blends technical governance expertise with strong program management, stakeholder stewardship, and cloud/security framework experience, including SOC 2, ISO 27001, and FedRAMP.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field.
• 5+ years of experience in Technical Program or Project Management, with at least 2 years supporting governance, risk, compliance, assurance/audit, or offensive security programs.
• Proven experience coordinating large, complex security or technology programs across cross-functional engineering, legal, and compliance teams.
• Working knowledge of security and compliance frameworks (e.g., SOC 2, ISO 27001, NIST CSF, NIST SP 800-53, FedRAMP).
• Familiarity with the offensive security engagement lifecycle (scoping, rules of engagement, testing, reporting, remediation) and cloud platforms (e.g., Azure, AWS).
• Proficiency with project management tools and methodologies (e.g., Agile, Scrum, Kanban).
• Demonstrated ability to keep stakeholders aligned and accountable to commitments while supporting decisions made by program owners and leadership.
• Strong verbal and written communication, time management, and organizational skills, with the ability to communicate technical risk to both technical and non-technical audiences.
• Fluent in English (spoken and written)

Responsibilities

• Coordinate planning, scheduling, and tracking of Deputy CISO organization initiatives in partnership with the Deputy CISO and program leads.
• Support the planning, tracking, and reporting of GRC, Internal Assurance, and Offensive Security initiatives, including compliance certification cycles, internal control assessments, and penetration testing engagements.
• Help create and evolve metrics to define, track, and report on KPIs; provide regular reporting to engineering and security leadership.
• Facilitate operating cadences for the Deputy CISO and direct reports, including planning sessions, status reviews, and steering meetings, capturing decisions, action items, and owners.
• Collaborate with Technical Program Managers across Cybersecurity to capture interdependencies and ensure consistency in planning, tracking, and reporting.
• Coordinate audit and certification readiness activities (e.g., SOC 2, ISO 27001, FedRAMP) on behalf of GRC leads, including evidence collection timelines, control owner follow-ups, and auditor scheduling.
• Coordinate logistics for penetration tests, red team exercises, and third-party assessments on behalf of Offensive Security leads, including scheduling, stakeholder communications, and status tracking.
• Maintain Security Assurance program documentation, including roadmaps, processes, runbooks, and status updates.

Skills

Program management

Stakeholder management

Cross-functional coordination

Agile methodologies

Communication skills

Analytical skills

English fluency

Education

Bachelor’s degree

Master’s degree preferred

Tools

Jira

Confluence

Azure DevOps

GRC platforms

Job description

About Delinea: Delinea is the identity security platform that continuously controls what AI agents, humans and machines can do and for how long. It extends privileged access management from the point of access to the moment of action, using just-in-time authorization to reduce standing privilege across on-premises, multi-cloud and short-lived infrastructure, without adding friction for legitimate users. Delinea provides visibility across every identity type, scores the risk each one carries, and preserves the context behind access decisions, making them auditable and defensible. It supports both static and ephemeris access, letting teams apply Zero Standing Privilege where risk demands it without replacing existing infrastructure.

Delinea’s Deputy CISO organization is seeking an experienced and highly skilled Technical Program Manager to contribute to the planning, execution, and delivery of Delinea’s Governance, Risk, & Compliance, Internal Assurance, and Offensive Security programs and initiatives.

This role will be responsible for assisting the Deputy CISO in driving execution of multiple initiatives across their organization and plays a critical part in ensuring the timely and effective implementation of GRC, Internal Assurance, and Offensive Security initiatives and aligning efforts with organizational goals.

The ideal candidate will possess a strong technical background in governance, risk, compliance, assurance, or offensive security, along with program management, with a proven ability to collaborate with engineering, legal, regulatory, and security leaders and coordinate complex, large-scale initiatives.

This is a hybrid role that is based in Mexico City, Mexico (Tue, Wed, Thu) and reports to the Deputy CISO.

What you´ll do

• Coordinate the planning, scheduling, and tracking of Deputy CISO organization initiatives in partnership with the Deputy CISO and program leads, helping ensure projects are completed on time, within scope, and on budget.
• Support the planning, tracking, and reporting of GRC, Internal Assurance, and Offensive Security initiatives, including compliance certification cycles, internal control assessments, and penetration testing engagements.
• Help create and evolve metrics to define, track, and report on key performance indicators (KPIs). Create and provide regular reporting to engineering and security leadership, as needed.
• Facilitate operating cadences for the Deputy CISO and direct reports, including planning sessions, status reviews, and steering meetings, capturing decisions, action items, and owners.
• Collaborate with Technical Program Managers across Cybersecurity to capture interdependencies and ensure consistency in planning, tracking, and reporting.
• Coordinate audit and certification readiness activities (e.g., SOC 2, ISO 27001, FedRAMP) on behalf of GRC leads, including evidence collection timelines, control owner follow-ups, and auditor scheduling.
• Coordinate logistics for penetration tests, red team exercises, and third-party assessments on behalf of Offensive Security leads, including scheduling, stakeholder communications, and status tracking.
• Maintain Security Assurance program documentation, including roadmaps, processes, runbooks, and status updates.

What you´ll need

• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field (Master’s degree preferred).
• 5+ years of experience in Technical Program or Project Management, with at least 2 years supporting governance, risk, compliance, assurance/audit, or offensive security programs.
• Proven experience coordinating large, complex security or technology programs across cross-functional engineering, legal, and compliance teams.
• Working knowledge of security and compliance frameworks (e.g., SOC 2, ISO 27001, NIST CSF, NIST SP 800-53, FedRAMP) sufficient to coordinate audit and control activities with subject-matter experts.
• Familiarity with the offensive security engagement lifecycle (scoping, rules of engagement, testing, reporting, and remediation) and with cloud platforms (e.g., Azure, AWS).
• Proficiency with project management tools and methodologies (e.g., Agile, Scrum, Kanban).
• Demonstrated ability to keep stakeholders aligned and accountable to commitments while supporting decisions made by program owners and leadership.
• Strong analytical skills with the ability to prioritize, manage competing demands, and meet deadlines.
• Strong verbal and written communication, time management, and organizational skills, with the ability to communicate technical risk to both technical and non-technical audiences.
• Fluent in English (spoken and written)

Preferred Skills

• Hands-on experience in security engineering, GRC, internal audit, or offensive security.
• Understanding of risk management and offensive security frameworks and standards (e.g., NIST RMF, ISO 31000, MITRE ATT&CK, CVSS).
• Experience supporting bug bounty or third-party penetration testing programs, including vendor coordination and findings tracking.
• Experience supporting internal audit, SOX IT general controls, or enterprise risk management programs.
• Security or program management certifications (e.g., CISA, CRISC, CISSP, PMP, or similar).
• Familiarity with Jira, Confluence, Azure DevOps, and GRC platforms (e.g., OneTrust, Hyperproof, Drata, Vanta).

Why work at Delinea?

• We're passionate problem-solvers helping the world's largest organizations protect what matters most: their human and machine identities.
• We invest in people who are smart, self-motivated, and collaborative.
• What we offer in return is meaningful work, a culture of innovation and great career progression.

At Delinea, our core values are STRONG and guide our behaviors and success:

• Spirited - We bring energy and passion to everything we do
• Trust - We act with integrity and deliver on our commitments
• Respect - We listen, value different perspectives, and work as one team
• Ownership - We take initiative and follow through
• Nimble - We adapt quickly in a fast-changing environment
• Global - We embrace diverse people and ideas to drive better outcomes

We believe weaving these core values into our day-to-day actions, and our process for hiring, evaluating, and promoting employees, helps us cultivate a work environment that embraces collaboration and camaraderie.

We take care of our employees. We offer competitive salaries, a meaningful bonus program, and excellent benefits, including healthcare insurance, as well as pension/retirement matching, comprehensive life insurance, an employee assistance program, time off plans, and paid company holidays.

Delinea is an Equal Opportunity and Aff…

Upon conditional offer of employment, candidates are required to complete comprehensive criminal background check, verification of education, and verification of employment, per employment policy. In addition, all publicly posted social media sites may be reviewed.