Security Technical Program Manager

About the Role

Abnormal Security is looking for an experienced Technical Program Manager to join our Security Operations and Engineering team. This role will be responsible for driving the successful execution of security initiatives, managing cross-functional programs, and ensuring alignment with organizational security objectives.

You'll drive critical security initiatives that protect our organization and our customers, working closely with engineering teams to translate security requirements into actionable deliverables. This role combines technical program management expertise with security domain knowledge to ensure our security programs are well-planned, properly executed, and effectively measured. You'll have the opportunity to shape our security roadmap while establishing robust program management practices that scale with our organization.

Who you are

• Proven experience leading and scaling programs as a program manager for a Security or similar team, managing portfolios of projects, and developing and implementing frameworks and best practices.
• Proven experience developing and reporting project and program performance metrics to varying levels of audience.
• Demonstrated experience developing and maintaining technical, procedural, and program/project related documentation.
• Solid technical background with an ability to give instructions to a non-technical audience.
• Hold yourself accountable for high-quality results and meeting deadlines in a fast-paced environment.
• Exercise sound judgment even when faced with ambiguity or competing approaches regarding the best path to success.
• A strategic thinker who thrives on bringing structure to complex security initiatives.
• A natural collaborator who can build strong relationships across engineering teams.
• A detailed planner who ensures work is well-defined and achievable.
• An organized leader who keeps multiple workstreams on track

What you will do 

• Ensure program activities align with strategy and manage the timely and high-quality execution of Security initiative landmarks.
• Work with project managers to develop project plans. 
• Design and manage program/project reporting for varying levels of audience.
• Coordinate with other program managers to ensure consistency across programs/projects within the InfoSec organization. 
• Drive program maturity growth through development of program maturity models and maturity roadmap; track progress.
• Create and maintain program roadmaps with clear milestones and deliverables
• Lead Agile ceremonies including sprint planning, daily stand-ups, and retrospectives
• Manage program tracking and reporting through JIRA and ServiceNow
• Partner with engineering teams to develop clear, actionable acceptance criteria
• Identify and mitigate program risks through proactive planning
• Facilitate cross-team coordination and dependency management
• Present regular status updates to stakeholders at all levels
• Drive continuous improvement in program management practices
• Maintain comprehensive program documentation
• Maintain regular, clear communication with project teams, key partners, and management regarding the status of programs, projects, owned processes and issues management.
• Effectively communicate program and project execution status, program health and effectiveness, key accomplishments, and risks to senior management both within Security and to our business partners.

Must Haves 

• 4+ years in a program manager role assigned to GRC, Security, or a team in a related field 
• Bachelor’s degree or equivalent experience 
• Proven experience leading complex technical programs and successfully executing projects with an emphasis on delivering results.
• Strong understanding of security concepts and practical usage
• Proficiency in JIRA, ServiceNow, or similar project management tools
• Hands-on experience with Agile methodologies.

Nice to Have 

• Professional certifications (PMP, CSM, CISSP, CISM)
• Prefer a degree in information assurance, computer science, information security, or business.
• Experience preferably at a technology or SaaS / Cloud and/or with a regulated public company
• Experience with cloud security initiatives
• Knowledge of DevSecOps practices and tools
• Experience with risk management frameworks
• Background in security compliance standards
• Experience with automated security testing and tooling
• Track record of implementing program management best practices
• Experience with security incident response processes
• Familiarity with security architecture and design principles

#LI-MA1