Senior Security Technical Program Manager

Snap Inc.; Santa Monica (CA); On-site; USD 170,000 - 210,000; Full time

Benefits offered by this job

Parental leave

Medical coverage

401(k) plan

Job summary

Snap Inc. is seeking a Security Technical Program Manager to lead pivotal security programs, improve cyber maturity, and align risk reduction with business priorities.

You will design and operate KRIs/KPIs, establish dashboards, and present executive reviews that translate complex signals into clear risk narratives. The role requires coordinating with Security, Engineering, Product, and Legal teams, driving root-cause analysis, and scaling security operations across the organization.

Qualifications

• Bachelor’s degree in computer science or a related technical field or equivalent experience.
• 6+ years of experience in security advisory, technical program management, or security solution delivery.
• Experience influencing cross-functional teams and driving large security programs.
• Experience with cybersecurity frameworks and risk-based decision making.

Responsibilities

• Lead the design, build, and operation of security programs to improve cyber maturity.
• Define and operationalize security KRIs, KPIs, and health metrics across domains.
• Establish measurement frameworks, dashboards, and reporting for leadership.
• Prepare executive reviews translating technical signals into risk narratives.
• Drive cadence for leadership reviews, OKRs, milestones, and accountability.

Skills

AI tooling proficiency

Security program leadership

Cross-functional collaboration

Data-driven decision making

Communication excellence

Education

Bachelor's degree in computer science or related field

Job description

• We’re looking for a Security Technical Program Manager to join Snap! The Security TPM team designs and leads multiple critical security programs at Snap
• Lead the design, build, and ongoing operation of security operations and risk programs that improve cyber maturity across core security foundations, including governance, intake, prioritization, escalation, and remediation follow-through
• Define and operationalize security KRIs, KPIs, and health metrics across key domains such as vulnerability management, incident response, detection and response effectiveness, control performance, remediation timeliness, and recurring risk themes
• Establish a consistent measurement framework, dashboarding model, and reporting taxonomy so security leaders can review trends, identify material gaps, and drive accountable action across their teams
• Prepare and present regular business reviews for security leadership that translate technical signals into clear risk narratives, decisions, priorities, and follow-up actions
• Build the operating cadence for security team leadership, including program reviews, metric reviews, escalation forums, and quarterly planning rhythms that connect strategy to execution
• Establish a common organizational framework for security team OKRs, including goal setting, dependency management, milestone tracking, evidence of progress, and end-of-quarter readouts
• Partner across Security, Engineering, Product, Infrastructure, Privacy, Legal, Compliance, and Operations to align program priorities, resolve blockers, and ensure consistent execution of risk reduction workstreams
• Drive root-cause analysis and remediation governance for significant operational issues, ensuring lessons learned are translated into durable process, technology, or control improvements
• Create and maintain a portfolio view of security initiatives, risks, dependencies, and commitments, and use that view to support prioritization, staffing discussions, and leadership tradeoff decisions
• Define standard methods for risk intake, issue tracking, exception handling, escalation thresholds, and verified closure to improve consistency across the security organization
• Improve the rigor of security operations by identifying opportunities for workflow simplification, automation, and better decision support, reducing toil while increasing transparency and accountability
• Develop executive-ready briefing materials, scorecards, and narratives that clearly communicate program status, emerging risks, mitigation plans, and areas requiring leadership intervention
• Monitor program performance over time and recommend changes to operating models, metrics, and review mechanisms to continuously raise the maturity of security operations and risk management practices

Benefits

• Up to 28 weeks of parental leave and return-to-work program
• Adoption, surrogacy, infertility, and fertility preservation benefits
• Backup child care coverage, center-based care support, & caregiver assistance
• Dependent Daycare Flexible Spending Account
• For Snap, employees taking care of loved ones with complex, chronic, or ongoing care needs (i.e. parent with Dementia, spouse with Cancer, child with Autism), your family can save time, money, & stress with Wellthy
• Short-term disability, long-term disability, basic life insurance, and AD&D insurance
• Lactation rooms (based on office location) and breastmilk shipping coverage
• Services to support your path to parenthood & beyond - fertility support & family planning via Carrot, SNOO, Hinge Health
• Comprehensive medical coverage, including PPO, HDHP with HSA, and HMO options
• Dental coverage, including orthodontia benefits
• Vision coverage, including frame and contact allowance and LASIK benefits
• Free membership to One Medical for primary and urgent healthcare services
• Business Travel Insurance
• Gym perks and discounts
• Team fitness classes and races
• Sports leagues
• Cooking and nutritional workshops
• Well-being reimbursement
• Unlimited access to virtual physical therapy with Anthem
• 15 sessions per year of mental health for you + dependents through Lyra
• Generous time off and leave programs. In the US, this includes the following:
• Up to 3 weeks (120 hours) of vacation time and 1 floating holiday for non-exempt team members
• 15 sick and safe days per year
• 12 paid holidays per year
• Meditation and yoga classes
• Social gatherings, team outings, and volunteering programs
• Speaker series, classes, and subscriptions to educational programs
• Snap Inc. provides a 401(k) plan that allows you to save on a pre-tax, Roth, and after-tax basis for your retirement (yes, we even have the Mega backdoor option!) Snap will also match 100% up to 3% of your contribution and then 50% on your 4th and 5th%
• Flexible Spending Accounts for healthcare, daycare and commuter
• Health Savings Account with employer contributions
• Rocket Lawyer memberships
• Financial education programs
• Snap exclusive discounts and perks
• Compensation packages that let you share in Snap’s long-term success!

• Proficiency in, or a strong aptitude for, leveraging AI tools to streamline development, paired with the critical judgment to audit generated output for architectural integrity, performance bottlenecks, and security risks
• Experience influencing teams and other cross-functional stakeholders to drive security programs
• Adaptability in learning and applying evolving AI systems and tools to remain at the forefront of engineering trends and modern development practices
• Exceptional verbal and written communication skills, with mastery in the ability to tailor the message to the audience
• Depth of security experience and familiarity with a broad range of information security concepts and principles
• Proven experience of running critical programs within a security field
• Experience working with engineers, driving large security projects that have had a proven impact
• Bachelor’s degree in computer science or a related technical field or equivalent experience
• 6+ years of experience in security advisory space, technical program management or security solution delivery
• Experience with CISSP, CISM, CCSP, ISO 27001 Lead Implementer or similar certifications a plus
• Experience with NIST CSF 2.0, NIS2, or ISO 27001