Senior Security Technical Program Manager

VulnU; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Paid parental leave

Job summary

BeyondTrust, a leader in cybersecurity SaaS, is seeking a Senior Security Technical Program Manager to oversee the security issues management program and cloud governance initiatives. You will work with CISO Office teams and stakeholders to streamline operations, document requirements, and drive measurable security outcomes.

The role emphasizes risk-based prioritization, structured handoffs, and ongoing program reporting to leadership, with a focus on automation and AI to improve efficiencies.

Qualifications

• Bachelor's degree in technology, CS, or related field.
• 5-7 years of experience in security, project management, or technology.
• Experience communicating technical concepts to non-technical audiences.

Responsibilities

• Oversee, plan, and manage security initiatives for all security pillars.
• Serve as Security TPM for the security issues management program, end-to-end Jira lifecycle.
• Triage new issues by priority rubric and set due dates.
• Own critical/high issues with executive notification and escalation.
• Ensure gate approval before handoff with documented criteria.
• Lead cross-functional security issues review and surface dependencies.
• Close issues after independent security validation passes.

Skills

Security program management

Stakeholder management

Risk assessment

Jira

Education

Bachelor's degree in technology/CS or related

Tools

Jira

Job description

# Senior Security Technical Program ManagerBeyondTrust · beyondtrust.comCategory: Cloud SecurityLocation: RemoteLevel: Manager## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* Paid parental leaveBeyondTrust is a place where you can bring your purpose to life through the work that you do, creating a safer world through our cybersecurity SaaS portfolio.Our culture of flexibility, trust, and continual learning means you will be recognized for your growth and for the impact you make on our success. You will be surrounded by people who challenge, support, and inspire you to be the best version of yourself.The RoleAs a Senior Security Technical Program Manager at BeyondTrust, you will use your technical expertise, business acumen and security domain knowledge to manage and streamline critical CISO Office operations and programs. In this role, you will be an advocate for building seamless and metrics-driven operational frameworks. You will be responsible for working collaboratively with CISO Office teams and business stakeholders to identify operational gaps, document requirements and needs, metrics visualization, and execute programs to streamline the way BeyondTrust build and retains customer trust.What You’ll DoOversee, plan, and manage security initiatives for all security pillars.Serve as the Security TPM for the security issues management program, running the end-to-end lifecycle on the security issues management Jira board from identification and triage through handoff, validation, closure, and reporting.Triage every new issues against the priority rubric (exploitability, blast radius, data sensitivity, regulatory or audit linkage, and compensating controls), confirm or adjust the Reporter’s initial priority, and set a due date at triage, hand off to Assignee as identified.Own Critical and High issues day to day, including executive notification, direct engagement with the Assignee, unblocking dependencies, and fast-tracking validation. Monitor additional issues through the recurring security issues management review and step in when an escalation trigger fires.Enforce the analysis gate before handoff, approving a ticket as handoff-ready only when root cause, a specific recommended remediation, named impacted systems and teams, and verifiable acceptance criteria are documented.Identify the correct accountable Assignee by role, run a single structured handoff meeting, and drive formal acceptance in Jira within the agreed window.Confirm Assignee remediation plans meet the acceptance criteria without redesigning them, and help surface cross-team dependencies such as budget, tooling, or other teams.Run the recurring cross-functional security issues review, require an updated due date and logged reason for any slippage, and act as decision-maker on priority and acceptance-criteria disputes, escalating unresolved disagreements to the Sponsor.Formally close security issues only after independent Security validation passes, and reopen failed validations to the Assignee with the specific gap noted.Maintain security issues management board hygiene, including identifying duplicate or overlapping tickets, consolidation opportunities, and tickets missing descriptions, due dates, or owners.Lead the Cloud Governance program to convert eligible cloud-scoped remediations into enforceable Kion guardrails.Create detailed project plans to support each initiative while defining and supporting metric visualization for all of BT.Provide a steady stream of ideas and solutions during security initiatives to introduce innovation and improve operational efficiency.Implement relevant metrics to measure security specific program success, including the security issues management program health (open and closed volume by priority tier, overdue tickets, tickets not yet accepted, and due-date slippage).Develop reports to communicate program progress, including the monthly rollup and the quarterly Sponsor program review, to leadership and cross-functional stakeholders.Collaborate with other cross-functional teams.Identify cross-team dependencies to incorporate them into the program planning process.Ensure root cause analysis is completed for technical issues and security findings, and shepherd the implementation of solutions through accountable owners.Make necessary recommendations for adjustments to security processes based on performance metrics.Influence strategic decisions about security direction.Participates in building and managing of AI processes to create operational efficiency.Ensure complete compliance according to industry standards by documenting all the processes and adjusting them, when necessary.Manage project escalations and help assemble project teams to tackle critical items, including executing the security issues management program’s defined escalation triggers (non-acceptance, unlogged slippage, and overdue or Critical findings) to the Assignee’s Manager, Trust Assurance Leadership, or the ELT Sponsor.What You’ll BringBachelor's degree in technology, Business Administration, Computer Science, or related field5-7 years of relevant professional experience in security, project management, or technologyProficient level of understanding security domainsExperience in communicating technical concepts to non-technical audiences and vice versa.Experience with creative problem solving in a fast-paced and ever-changing environment.Experience in Security or Cloud software solutionsAbility to recognize, evaluate and reduce program risksExcellent stakeholder management skillsDemonstrated experience running a security findings, vulnerability management, or audit remediation program across multiple engineering and business teams, from intake and prioritization through verified closureExperience applying structured risk-scoring methods (e.g., CVSS or a weighted rubric) consistently and defending prioritization decisions with stakeholdersProven ability to drive accountability with owners outside your reporting line, including formal handoffs, acceptance, and escalation to senior leadershipHands-on experience with Jira workflows, JQL, and dashboards for program tracking and reportingWorking knowledge of compliance frameworks and audit evidence (e.g., SOC 2, ISO 27001)Nice To HaveSecurity certification, e.g. CISA, CISSP; program management certification, e.g. PMPStrong business acumenBig picture thinker and self-starterExcellent time management and organizational skillsExperience working for a fast paced, SaaS companyStrong spoken and written communication skillsExperience with cloud security posture management or policy-as-code guardrails in AWS, Azure, or GCP (e.g., Kion)Experience using automation or AI to streamline finding triage, validation, or program reportingBetter TogetherDiversity. Inclusion. They’re more than just words for us. They are the guiding values of how we build our teams, cultivate leaders, and create a culture where people feel connected.We take care of our employees so they can take care of our customers. Customers who come from all walks of life just like us. We hire incredible people from diverse backgrounds because when we are different together, we are stronger together.About UsBeyondTrust is the global identity security leader protecting Paths to PrivilegeTM. Our identity-centric approach goes beyond securing privileges and access, empowering organizations with the most effective solution to manage the entire identity attack surface and neutralize threats, whether from external attacks or insiders.BeyondTrust is leading the charge in transforming identity security to prevent breaches and limit the blast radius of attacks, while creating a superior customer experience and operational efficiencies. We are trusted by 20,000 customers, including 75 of the Fortune 100, and our global ecosystem of partners.Learn more at www.beyondtrust.com.#LI-DF1—Curated listing: aggregated from BeyondTrust's public careers page. Apply directly via the link — BeyondTrust has not paid for placement.