Senior Security TPM: Vulnerability & Cross‑Team Lead

a16z crypto; San Francisco (CA); Hybrid; USD 265,000 - 344,000; Full time

Benefits offered by this job

Carry program

Discretionary bonus

Health/dental/vision insurance

401K plan

Vacation and sick leave

Job summary

a16z crypto is seeking a Staff Security Technical Program Manager to own the vulnerability management program and drive cross-team security initiatives across the firm. You will manage planning rhythms, sprints, OKRs, and documentation to keep stakeholders aligned and ensure timely remediation.

The role requires an in-office presence two days a week in San Francisco, CA, with occasional days in Menlo Park, CA.

Qualifications

• 7+ years of technical program management experience, with at least 3 years running security programs.
• Track record of owning a vulnerability management program at scale with SLAs and executive reporting.
• Technical fluency to discuss findings, severity, exploitability, and risk ratings with engineers.

Responsibilities

• Own security remediation across the firm end-to-end, pulling findings into a single backlog with clear owners and SLAs.
• Run the vulnerability management program: scan coverage, patch cadence, exceptions, risk acceptance, and leadership-facing reporting.
• Coordinate vendor security reviews and keep requesters informed on review status.
• Drive cross-team security initiatives from kickoff to delivery, partnering with IT, Legal, HR, and Compliance.
• Build and run the team’s execution rhythm: sprint planning, quarterly OKRs, and visible ticket hygiene.
• Raise the bar on documentation: program docs, runbooks, decision records, and postmortem follow-ups.
• Define and track metrics to turn data into actionable insights.

Skills

Technical program management

Vulnerability management

Security programs leadership

Agile execution

Cross-functional collaboration

Documentation & reporting

Stakeholder management

Tools

Jira

Linear

Confluence

Notion

BI dashboards

Spreadsheet tooling

Job description

a16z crypto is seeking a Staff Security Technical Program Manager to own the vulnerability management program and drive cross-team security initiatives across the firm. You will manage planning rhythms, sprints, OKRs, and documentation to keep stakeholders aligned and ensure timely remediation.

The role requires an in-office presence two days a week in San Francisco, CA, with occasional days in Menlo Park, CA.