Senior Security Program Manager

Overview

Role Overview - Senior Security Program Manager

Key Responsibilities

• Own the cybersecurity portfolio execution model including planning, governance rhythm, risk, reporting, and closure standards
• Drive quarterly planning for the security roadmap including sequencing, resourcing assumptions, and critical path
• Translate CISO projects and priorities, regulatory commitments, and audit requirements into executable program plans with owners, milestones, dependencies, and measurable outcomes
• Run weekly execution reviews with security leadership, enforce action closure, and manage decision deadlines
• Build and maintain the Group Security Scorecard across entities and functions, defining the metric set, targets, owners, and data sources and including it in the monthly reviews.
• Maintain the cybersecurity portfolio system of record covering initiative status, milestones, risks, dependencies, and decisions
• Produce executive-ready reporting packs with consistent format across progress, risks, decisions required, and next milestones
• Write one-pager program briefs for major initiatives covering scope, success metrics, owners, milestones, acceptance criteria, and timelines
• Track hiring and onboarding critical path for roadmap delivery milestones, without owning recruiting execution
• Improve execution visibility through automation, tooling, and dashboards that keep portfolio health current with minimal overhead on teams
• Who we need?
• Senior PM experience running cross-functional portfolios across multiple teams with tight delivery expectations
• Strong ability to drive accountability through clarity, structured pressure, and escalation, without relying on formal authority
• Strong ability to build a delivery system including cadence, artifacts, templates, dashboards, and consistent reporting
• Executive-grade writing and communication with concise updates, clear risk framing, and clean decision asks
• Strong judgment on prioritization, sequencing, and tradeoffs under competing demands and constrained capacity
• Ability to convert ambiguity into scope, milestones, owners, and measurable outputs
• Strong program management fundamentals with a bias toward execution, not ceremony
• Security fluency across variety of security domains, enough to pressure-test plans and timelines without being the technical decision maker.
• High ownership and maturity handling sensitive information while representing the security leaders and CISO.
• Preferred experience
• Experience in a CISO office, security leadership office, or security program portfolio in a large tech company
• Experience delivering security transformation programs across multiple geographies and business units.
• Experience PM’ing security roadmaps that include detection and response maturity, platform security modernization, secure engineering programs, and governance remediation.
• Experience building governance rhythms and reporting packs used by executives, audit committees, or senior leadership stakeholders
• Experience in high-scale consumer internet, e-commerce, fintech, payments, logistics, or marketplace environments
• Strong program management tooling depth (or equivalent) and dashboarding habits that leadership can actually consume.
• Is this you?