Sr. Technical Program Mgr, Security Policy & Governance

Xcelforce; Seattle (WA); Remote; USD 180,000 - 260,000; Full time

Job summary

xcelForce, on behalf of a Fortune 100 technology company, seeks a Sr. Technical Program Manager for Security Policy & Governance. This 12-month contract role runs on Pacific Time business hours and starts immediately.

You will refresh the policy portfolio, create templates for policies, standards, and procedures, publish 50 documents with owners and review dates, map completed work to security frameworks, and document the policy lifecycle with an annual calendar.

Qualifications

• 10+ years as a Technical Program Manager at a large-scale technology company.
• Bachelor of Science degree in a technical field.
• Has personally written policies, standards, or procedures.
• Uses LLM tools in real work to draft, review, and build automations, and can show an example.
• Record of driving senior stakeholders to sign-off on tight deadlines.
• Takes direct feedback and adjusts quickly.
• Able to work Pacific Time business hours.
• Available to start immediately.

Responsibilities

• Refresh the policy portfolio with prioritization and retirement decisions.
• Create templates for policies, standards, and procedures with ownership and review cadence.
• Publish 50 documents with clear requirements and assigned owners and a current review date.
• Map completed documents to the client’s required security frameworks and highlight gaps.
• Document a policy lifecycle with review, approval, version control, exceptions, retirement, and an annual calendar.
• Lead two policy review cycles and two handover sessions for internal maintenance.
• Demonstrate policy adoption and effectiveness to client teams.

Skills

Technical Program Management

Policy drafting

Stakeholder management

LLM tooling experience

Security governance

Education

Bachelor's degree in a technical field

Tools

ServiceNow GRC

RSA Archer

OneTrust

Job description

xcelForce is hiring for a Fortune 100 technology company HQ in Silicon Valley whose products are used by millions of people around the world every day. Our client is an innovator across multiple industries, building and delivering services on the latest AI capabilities at a global scale, and it expects its teams to work with those tools too. You will work alongside exceptional people in an environment that moves fast, sets a high bar, and has fun doing it. If you want to do serious work with some of the best in the industry, this is the place to do it.

Role Description

The Sr. Technical Program Manager, Security Policy & Governance is a 12-month contract role with potential extension, placed by xcelForce with a Fortune 100 technology company. The role works Pacific Time business hours and starts immediately. Compensation is based on experience.

The client’s security organization needs its policy portfolio to be brought up to date and a repeatable process for keeping it that way. The deliverables below are the first ones needed. More policy and governance work of the same kind will follow over the term.

• A prioritized assessment of the existing policy portfolio, identifying what to revise, replace, retire, or retain
• Separate templates for policies, standards, and procedures, covering ownership, version, approval, review date, scope, and framework references
• 50 authored or revised documents, each with clear requirements, consistent terminology, an accountable owner, and a current review date, reviewed by stakeholders and ready for client approval
• A mapping of every completed document to the client’s required security frameworks, with coverage gaps highlighted
• A documented policy lifecycle covering review, approval, version control, exceptions, and retirement, plus an annual review calendar and a portfolio change log
• Two review cycles (one you lead, one the client’s team leads with your support) and two handover sessions, leaving the internal team able to maintain the portfolio
• Agreed measures, set with the client’s team, showing the policies are adopted and effective in practice

This is a fast-paced environment with high expectations. Senior stakeholders review the work, feedback is direct, and you will be expected to act on it quickly. In keeping with how xcelForce works, you will use LLM tools and automation to move faster.

Qualifications

Required:

10+ years as a Technical Program Manager or equivalent at a large-scale technology company

Bachelor of Science degree in a technical field

Has personally written policies, standards, or procedures

Uses LLM tools in real work to draft, review, and build automations, and can show an example

Record of driving senior stakeholders to sign-off on tight deadlines

Takes direct feedback and adjusts quickly

Able to work Pacific Time business hours

Available to start immediately

Preferred:

Prior contract or consulting engagements with a formal handover to an internal team

PMP, PgMP Certification

CISSP, CISM, CISA, CRISC, or ISO 27001 Lead Implementer/Auditor

Experience with GRC tooling, such as ServiceNow GRC, Archer, or OneTrust

Has mapped policies or controls to at least one major security framework, such as ISO 27001, SOC 2, NIST CSF, or PCI DSS

Experience supporting external security audits

This is a remote job, but preferred if the person has the ability to commute to Seattle, WA frequently.