Senior Security Technical Program Manager

Flywire; Massachusetts; Hybrid; USD 110,000 - 139,000; Full time

Job summary

Flywire is seeking a Senior Security Technical Program Manager to drive security initiatives across the organization. You will collaborate with product, engineering, and security teams to ensure Secure-SDLC adoption and strong risk management.

The ideal candidate has 6+ years in technical program management focused on security, excellent communication with engineers and executives, and the ability to manage multiple projects across time zones. Travel may be required.

Qualifications

• Bachelor's or Master's degree in Cybersecurity, Information Technology, or a related field.
• 6+ years of experience in technical program management, ideally with a focus on security.
• Ability to communicate effectively with both engineers and executives.
• Proficiency in managing and advancing multiple projects simultaneously.

Responsibilities

• Serve as a subject matter expert on application security matters, providing guidance and support to technical and non-technical stakeholders.
• Lead the development and implementation of application security programs and initiatives to protect software assets.
• Collaborate with product and engineering to align scope, priorities, and Definition of Done.
• Coordinate with SDLC, SRE, PMs and QA to embed security in the SDLC.
• Coordinate remediation of vulnerabilities identified by the security team with engineering.
• Define and report on security compliance metrics and progress.
• Oversee security assessments, audits, and regulatory compliance activities.
• Drive threat and vulnerability management and secret management programs.
• Lead continuous improvement of security processes and automation.
• Represent user interests in security designs and gather feedback for planning.
• Manage relationships with external security vendors and consultants.
• Lead efforts to ensure GDPR, HIPAA, PCI DSS and related compliance.

Skills

Application security

Security program management

SDLC security

Stakeholder communication

Education

Bachelor's or Master's in Cybersecurity/IT

Job description

Are you ready to trade your job for a journey? Become a FlyMate!

Passion, excitement & global collaboration are all core to what it means to be a FlyMate. At Flywire, we’re on a mission to deliver the world’s most important and complex payments. We use our Flywire Advantage - the combination of our next-gen payments platform, proprietary payment network and vertical specific software, to help our clients get paid, and help their customers pay with ease - no matter where they are in the world.

Who we are:

Flywire is a global payments enablement and software company, founded more than a decade ago to solve high-stakes, high-value payments in higher education. We’ve since scaled into new regions and industry verticals and expanded our product offerings to deliver meaningful value to our clients around the world.

Today we support more than 5,300 clients across the global education, healthcare, travel & B2B industries, with diverse payment methods across 240 countries & territories and more than 140 currencies.

With over 1,400 global FlyMates, representing more than 40 nationalities, and in 15 offices world-wide, we’re looking for FlyMates to join the next stage of our journey as we continue to grow.

The Opportunity:

The Senior Security Technical Program Manager will be responsible for driving the planning, execution, and delivery of security initiatives and programs across the organization. This role will involve collaborating with cross-functional teams to ensure the security of our applications.

Establish strong relationships with different stakeholders in order to communicate and drive the security roadmap.

The ideal candidate will have a strong technical background in security, experience in security by design and Secure-SDLC, excellent project management skills, and the ability to effectively communicate and coordinate with stakeholders at all levels.

• Serve as a subject matter expert on application security matters, providing guidance and support to technical and non-technical stakeholders.
• Lead the development and implementation of application security programs and initiatives to protect the organization’s software assets and mitigate security risks.
• Work closely with product and engineering departments to guarantee and confirm program scope, priorities, and Definition of Done, thereby ensuring the attainment of defined business outcomes
• Collaborate with software development, SRE, Program Managers and QA teams to integrate security best practices throughout the software development lifecycle (SDLC).
• Coordinate the resolution of vulnerabilities identified by the application security team, coordinating with engineering teams to ensure timely remediation.
• Define and report on development lifecycle security compliance, success metrics and active progress.
• Oversee security assessments, audits, and compliance activities to identify vulnerabilities and ensure adherence to security standards, regulations, and industry best practices.
• Coordinate the threat and vulnerability management, secret management, and the third-party security program to improve our security posture and mitigate risks effectively.
• Drive continuous improvement of security processes and procedures, leveraging automation and technology where applicable.
• Represent the user’s interests in security designs, actively gather feedback, pinpoint security hurdles, and incorporate them into our strategic planning.
• Manage relationships with external security vendors, consultants, and other stakeholders to augment internal capabilities and stay abreast of industry trends and emerging threats.
• Lead efforts to ensure compliance with relevant laws, regulations, and industry standards governing application security, such as GDPR, HIPAA, PCI DSS, and others.
• Mentor and coach junior members of the application security team, fostering a culture of learning and professional development.

Here’s What We’re Looking For:

• Bachelor's or Master's degree in Cybersecurity, Information Technology, or a related field.
• 6+ years of experience in technical program management, ideally with a focus on security
• Ability to communicate effectively with both engineers and executives
• Proficiency in managing and advancing multiple projects simultaneously.
• Versatility in collaborating with teams across different time zones and functions, with readiness to travel as needed.
• Ability to influence and motivate individuals across a wide range of job roles and functions.
• Ability to work independently.
• Good analytical and problem-solving skills.
• Excel in problem-solving during high-pressure scenarios, making well-informed decisions while considering the impact on team goals.
• Navigate high-pressure situations with ease, maintaining focus on tasks and objectives.
• Demonstrate resilience in the face of adversity, providing a steady and positive influence on team members.
• Ability to communicate complex technical concepts to both technical and non-technical co-workers in a clear and concise manner.

We are excited to get to know you! Throughout our process you can expect to meet different FlyMates including the Hiring Manager and other Flymates. Your Talent Acquisition Partner will walk you through the steps and be your “go-to” person for questions.

Flywire is an equal opportunity employer and follows a policy of administering all employment decisions and personnel actions without regard to race, color, religion, sex, pregnancy, gender identity, national origin, age, ancestry, physical or mental disability, sexual orientation, genetic disposition or carrier status, veteran status, or any other category protected under applicable national, federal, state or local law.

The US base salary range for this full-time position is $110,000 - $139,000, plus equity and benefits. Our salary ranges are determined by role, position level, and location. The range displayed on this job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. Within the range, individual pay is determined by work location and several other factors, including job-related skills, experience, relevant education and training.

#LI-Hybrid