Cybersecurity Remediation Program Lead

RXinsider LTD.; Cambridge, Northern (MA, KY); Hybrid; USD 146,000 - 234,000; Full time

Benefits offered by this job

Competitive healthcare

Annual bonus potential

Generous paid time off

70/30 in-office work model

Job summary

Moderna is seeking a Senior Technical Program Manager to lead cybersecurity remediation programs across the organization. You will oversee end-to-end delivery of multiple remediation workstreams, coordinating with security, engineering, and business teams to move findings from scans, audits, and incidents to closure.

The role emphasizes data-driven governance, risk-based prioritization, and executive communication, including board-level reporting.

Qualifications

• 8+ years in Technical Program Management, Cybersecurity PM, or similar roles.
• Experience leading complex, cross-functional remediation programs in cybersecurity or enterprise IT.
• Strong understanding of vulnerability management, incident response, identity, cloud security, and application security.
• Experience working with findings from audits, risk assessments, penetration tests, and security incidents.
• Excellent stakeholder partnership and executive-level communication.

Responsibilities

• Own end-to-end remediation programs across Moderna technology and business teams, from identification through closure.
• Define and monitor program metrics, risks, and trends to drive accountability and improvement.
• Lead executive- and board-level reporting on remediation posture and systemic trends.
• Establish a centralized remediation operating model with governance, SLAs, and tracking.
• Partner with security, engineering, and business teams to align priorities and remove blockers.

Skills

Technical Program Management

Cybersecurity

Cross-functional collaboration

Stakeholder management

Risk management

Job description

Moderna is seeking a Senior Technical Program Manager to lead cybersecurity remediation programs across the organization. You will oversee end-to-end delivery of multiple remediation workstreams, coordinating with security, engineering, and business teams to move findings from scans, audits, and incidents to closure.

The role emphasizes data-driven governance, risk-based prioritization, and executive communication, including board-level reporting.