Senior Security Technical Program Manager

This is a fully remote position, open to applicants in Canada, +1 more country.

📋 Description

• Oversee, strategize, and manage security initiatives across all security domains.

• Manage the complete lifecycle of security issue management in Jira, from identification and triage to handoff, validation, closure, and reporting.

• Assess issues based on exploitability, blast radius, data sensitivity, regulatory or audit connections, and compensating controls.

• Take ownership of Critical and High issues, which includes executive notifications, dependency management, and expediting validation processes.

• Implement analysis gates and confirm root causes, remediation recommendations, affected systems and teams, and acceptance criteria.

• Facilitate structured handoffs and lead formal acceptance processes in Jira.

• Evaluate remediation plans and highlight inter-team dependencies.

• Conduct regular cross-functional security issue reviews and address disputes regarding priorities and acceptance criteria.

• Officially close issues following independent Security validation and reopen any that fail validation.

• Maintain the integrity of the security issues management board.

• Spearhead the Cloud Governance program and transform eligible cloud remediations into enforceable Kion guardrails.

• Develop project plans and assist in metric visualization.

• Create security program metrics and leadership reports, including monthly summaries and quarterly Sponsor reviews.

• Collaborate with various teams to identify dependencies.

• Ensure root cause analyses are performed and solutions are implemented by accountable owners.

• Suggest adjustments to security processes based on performance metrics.

• Influence the strategic direction of security initiatives.

• Establish and manage AI processes to enhance operational efficiency.

• Ensure compliance with industry standards through comprehensive process documentation and adjustments.

• Handle escalations and form project teams for critical issues.

⛳️ Requirements

• Bachelor's degree in technology, Business Administration, Computer Science, or a related field.

• 5-7 years of relevant professional experience in security, project management, or technology.

• Strong understanding of various security domains.

• Proven experience in conveying technical concepts to non-technical audiences and vice versa.

• Demonstrated ability in creative problem-solving within a dynamic and rapidly changing environment.

• Experience with Security or Cloud software solutions.

• Ability to identify, assess, and mitigate program risks.

• Exceptional stakeholder management capabilities.

• Experience managing a security findings, vulnerability management, or audit remediation program across multiple engineering and business teams, from intake and prioritization to verified closure.

• Familiarity with structured risk-scoring methods such as CVSS or a weighted rubric.

• Capability to drive accountability with owners outside the reporting line, including formal handoffs, acceptance, and escalation to senior leadership.

• Hands-on experience with Jira workflows, JQL, and dashboards.

• Working knowledge of compliance frameworks and audit evidence such as SOC 2 and ISO 27001.

🏝️ Benefits

• Culture of flexibility, trust, and continuous learning.

• Recognition for employee growth and impact.

• Diversity and inclusion-focused workplace culture.