Security Technical Program Manager
San Francisco, CA • FullTime
Posted 1mo ago
About the job
Sierra is seeking a Security Technical Program Manager to drive high-impact security and infrastructure initiatives. This role involves leading complex, cross-functional programs across cloud infrastructure, platform security, identity and access management, and secure software delivery. You will be accountable for program execution, planning, and health, managing dependencies, tracking risks, and ensuring the delivery of critical security programs. Additionally, you will help shape Sierra's security strategy by partnering with leadership to define priorities and execution plans, and build strong security foundations by driving programs for durable security primitives. The role requires translating ambiguity into clear execution, decomposing challenges into structured programs, and leading communication and alignment with various stakeholders, including engineering, security, product, legal, and executive leadership.
Responsibilities
- Drive security and infrastructure initiatives end-to-end.
- Lead complex, cross-functional programs spanning cloud infrastructure, platform security, identity and access management, detection and response, vulnerability management, and secure software delivery.
- Own execution, planning, and program health, including sequencing work, managing dependencies, tracking risk, and ensuring delivery of critical security programs.
- Help shape security strategy by defining priorities, investment areas, and execution plans.
- Build and strengthen security foundations by establishing durable security primitives.
- Translate ambiguity into clear execution for security, risk, and compliance challenges, especially in emerging AI domains.
- Lead communication and alignment with leadership on program health, risks, dependencies, and tradeoffs.
Requirements
- Experience running security-focused technical programs in fast-growing SaaS or platform environments.
- Strong technical fluency across cloud infrastructure, IAM, infrastructure as code, observability, secure CI/CD, and incident response.
- Ability to execute through ambiguity, prioritize effectively, and keep teams moving.
- Comfort operating in environments where things aren’t fully built yet and helping decide what needs to be built first.
- Clear, concise communication with senior technical and business leaders.
- A collaborative, pragmatic style with high ownership and high agency.
- Experience scaling security programs globally in AI-first or data-intensive SaaS environments.
- Exposure to emerging AI risk, data governance, or agent and model-related security considerations.
- Experience supporting security initiatives in public-sector, regulated and/or multi-cloud environments (AWS, GCP, Azure).
- Relevant security, cloud, AI or technical program management certifications.
- Familiarity with regulatory and compliance frameworks (ISO 27001, PCI DSS, FedRAMP, HIPAA).