InfoSec Tech Program Lead - Security & Compliance

WEX, Inc.; Portland (ME); On-site; USD 101,000 - 122,000; Full time

Job summary

WEX, Inc. is seeking a Senior Technical Program Manager to lead Information Security initiatives across global teams.

You will own end-to-end delivery, coordinate across Architecture, Engineering, and Product to implement security controls and ensure regulatory alignment. The role requires 5+ years in technical program management within regulated environments, strong experience with security tooling and governance, and the ability to drive cross-functional execution across time zones.

Qualifications

• 5+ years in Senior Technical Program Management roles managing Security Projects that are complex and enterprise-level.
• Expertise in security projects across platforms, applications, endpoints, infrastructure and cloud/security controls.
• Proven ability to partner with owners/engineers for scoping, task management and budget oversight.

Responsibilities

• Drive end-to-end technical implementation projects for Information Security initiatives.
• Facilitate planning with Product/Technology leadership to align with business goals.
• Develop detailed work plans, milestones, and execution strategies for system consolidations and workflow improvements.
• Monitor progress, surface risks, and coordinate with multiple engineering teams for timely remediation.
• Maintain high-quality data hygiene in reporting tools to support accurate status and metrics.

Skills

Security program mgmt

HIPAA/PCI-DSS/SOX

Agile / Jira / Confluence

Regulatory compliance

Stakeholder influence

Tools

Jira

Confluence

Job description

WEX, Inc. is seeking a Senior Technical Program Manager to lead Information Security initiatives across global teams.

You will own end-to-end delivery, coordinate across Architecture, Engineering, and Product to implement security controls and ensure regulatory alignment. The role requires 5+ years in technical program management within regulated environments, strong experience with security tooling and governance, and the ability to drive cross-functional execution across time zones.