Security Technical Program Manager

The Opportunity

Responsibilities and Tasks

• Lead Security by Design and Secure-SDLC programs across application launches, workflows, and emerging AI tools.
• Use enterprise AI tools and LLMs to automate program tracking, documentation, and security workflows.
• Coordinate vulnerability prioritization, tracking, and remediation with Product, SRE, and Software Engineering.
• Oversee technical security assessments and audits for PCI-DSS, SOX, SOC 1, and SOC 2 readiness.
• Maintain the security engineering roadmap, project charters, timelines, metrics, and Definition of Done.
• Integrate secure technical guardrails with software engineering and infrastructure teams.
• Coach junior security and program team members and promote technical excellence.

Education and Experience

• Bachelor's or master's degree in Cybersecurity, Information Technology, Computer Science, or a related technical field.
• At least 5 years of progressive Technical Program Management experience in Information Security, Application Security, or Cyber Risk.
• Extensive experience in Financial Services and the global Payments Industry.
• Deep understanding of transaction processing lifecycles, payment clearing rails, and financial platform mechanics.

Security and Compliance Qualifications

• Experience managing complex end-to-end audits for financial and data privacy frameworks.
• Mandatory proficiency with PCI-DSS v4.0, SOX, SOC 1, and SOC 2.
• Working knowledge of emerging standards such as DORA is preferred.
• Understanding of cloud architectures, Secure-SDLC pipelines, OWASP Top 10 for LLMs, and automated vulnerability management systems.

Skills and Abilities

• Translate compliance requirements and technical vulnerabilities into actionable engineering remediation plans.
• Replace manual program checkpoints with automation, workflows, and enterprise AI tools.
• Influence globally distributed engineers, product managers, and regulators without direct authority.
• Make risk-based decisions during security incidents and compressed product launch windows.
• Balance technical risk reduction with business enablement and revenue objectives.

Preferred Certifications

• CISSP, CISM, or CCSK certification is preferred.
• CISA certification is preferred.
• PMP or Agile/Scrum Master certification is preferred.

Compensation

• The US base salary range is $97,000-$120,000 plus benefits.
• Individual pay depends on work location, skills, experience, education, and training.

Workplace

• The posting is identified as hybrid.