Staff Security Program Manager: Vulnerability & Delivery

Andreessen Horowitz (a16z); San Francisco, Northern (CA, KY); Hybrid; USD 243,000 - 284,000; Full time

Benefits offered by this job

Carry program

Health insurance

Dental insurance

Vision insurance

Disability insurance

Life insurance

401K plan

Vacation and sick leave

Job summary

Andreessen Horowitz (a16z) in San Francisco is seeking a Staff Security Technical Program Manager to own the firm's vulnerability management program and drive cross‑team security initiatives.

The role requires in‑office presence twice a week in SF with occasional days in Menlo Park, and a proven ability to partner with IT, Legal, Compliance, and engineering to keep programs on schedule.

Qualifications

• 7+ years of technical program management experience, with at least 3 years running security programs.
• Owning a vulnerability management program at scale with SLAs and executive reporting.
• Technical fluency to read findings, understand severity, push back on risk ratings.
• Knowledge of enterprise tools (Okta, Slack, GSuite) to discuss security issues.
• Hands-on experience with agile execution: sprint planning, OKRs, Jira/Linear, Confluence/Notion, and program reporting in spreadsheets or BI dashboards.
• Clear, brief, and structured writing.
• Ability to build relationships across IT, Legal, Compliance, and engineering.
• Low ego, high empathy, and the capacity to collaborate effectively with diverse teams.

Responsibilities

• Own security remediation across the firm, end to end: pull findings from threat models, code reviews, penetration tests, vulnerability management, audits, and incident postmortems into a single tracked backlog, and manage it with clear owners, priorities, remediation SLAs.
• Run the vulnerability management program: Scan coverage, patching cadence, exceptions and risk acceptance, and reporting that shows leadership where risk stands.
• Work with stakeholders to keep vendor security reviews fast and consistent, and keep requesters informed on where their review stands.
• Drive cross-team security initiatives from kickoff through delivery, coordinating work across Security, IT, Legal, HR, and Compliance, and partnering with owners to keep commitments on track.
• Build and run the team's execution rhythm: Sprint planning, quarterly OKRs, and ticket hygiene that keeps the work visible.
• Raise the bar on documentation: Program docs, runbooks, decision records, and postmortem follow-ups that stay findable and current.
• Define and track the metrics that tell us whether our programs are working, and turn them into actionable insights.

Skills

Security program management

Vulnerability management

Technical fluency

SaaS security tools

Agile methodologies

Jira/Linear

Confluence/Notion

Documentation/writing

Cross-functional collaboration

Stakeholder management

Communication

Tools

Jira

Linear

Confluence

Notion

Job description

Andreessen Horowitz (a16z) in San Francisco is seeking a Staff Security Technical Program Manager to own the firm's vulnerability management program and drive cross‑team security initiatives.

The role requires in‑office presence twice a week in SF with occasional days in Menlo Park, and a proven ability to partner with IT, Legal, Compliance, and engineering to keep programs on schedule.