Senior Security TPM: Lead Vulnerability Programs

P2P; San Francisco (CA); On-site; USD 243,000 - 284,000; Full time

Benefits offered by this job

Health, dental, vision insurance

401(K) plan

Vacation & sick leave

Carry program and bonus programs

Job summary

Andreessen Horowitz (a16z) is seeking a Staff Security Technical Program Manager to lead the firm’s vulnerability management program and drive cross-team security initiatives. You will own planning rhythms, sprints, and documentation to keep stakeholders aligned and risk under control.

This role requires an in-office presence two days a week in San Francisco, CA, with occasional days in Menlo Park. You’ll partner with IT, Legal, Compliance, and Engineering to remove blockers and deliver

Qualifications

• 7+ years in technical program management with security program experience.
• Proven track record owning vulnerability management at scale with SLAs and risk reduction.
• Technical fluency to discuss findings, severity, exploitability.
• Experience with enterprise SaaS tools (Okta, Slack, GSuite).
• Hands-on agile execution: sprint planning, OKRs, Jira/Notion/Confluence.
• Clear, concise writing.
• Ability to collaborate across IT, Legal, Compliance, and engineering.

Responsibilities

• Own remediation across the firm end-to-end: pull findings from threat models, code reviews, penetration tests, vulnerability management, audits, and incident postmortems into a single backlog with clear owners and SLAs.
• Run the vulnerability management program: scan coverage, patch cadence, exceptions and risk acceptance, and leadership-ready risk reporting.
• Work with stakeholders to keep vendor security reviews fast and consistent, updating requesters on progress.
• Drive cross-team security initiatives from kickoff through delivery with Security, IT, Legal, HR, and Compliance partners.
• Build and run the team's execution rhythm: sprint planning, quarterly OKRs, and visible ticket hygiene.
• Raise the bar on documentation: program docs, runbooks, decision records, postmortems, all findable.
• Define and track metrics to turn data into actionable security insights.

Skills

Technical program management

Security program management

Vulnerability management

Cross-team coordination

Agile / Scrum

Documentation & reporting

Stakeholder management

Tools

Jira

Linear

Confluence

Notion

BI dashboards

Job description

Andreessen Horowitz (a16z) is seeking a Staff Security Technical Program Manager to lead the firm’s vulnerability management program and drive cross-team security initiatives. You will own planning rhythms, sprints, and documentation to keep stakeholders aligned and risk under control.

This role requires an in-office presence two days a week in San Francisco, CA, with occasional days in Menlo Park. You’ll partner with IT, Legal, Compliance, and Engineering to remove blockers and deliver