security program manager

OpenAI

About the Team
 
OpenAI builds powerful AI systems like ChatGPT, the OpenAI API, and enterprise products that serve millions of users across the globe. As we scale, securing our infrastructure, protecting sensitive data, and meeting global compliance standards are essential to our success and societal impact.
 
Security at OpenAI is a cross-cutting function that spans infrastructure, applied engineering, legal, policy, and product. Technical Program Managers (TPMs) play a critical leadership role in aligning teams and delivering execution at scale—and this leadership role will be foundational in shaping how we secure OpenAI’s systems, users, and commitments.
 
About the Role
 
We are hiring a
 
Security Technical Program Manager, Lead
 
to drive the strategy, leadership, and execution of OpenAI’s most critical security and compliance programs. This is a senior leadership TPM role responsible for overseeing complex technical initiatives (e.g., access control, audit logging, workload identity, enterprise-grade security features), while also leading and growing a team of TPMs who operate across security, compliance, and privacy domains.
 
You will partner with Engineering, Infrastructure, Security, GRC, Legal, and Product leadership to align priorities, drive accountability, and build the program management structures needed to scale our security posture with precision and urgency.
 
This role is based in San Francisco, CA. We use a hybrid work model of 3 days in the office per week and offer relocation assistance to new employees.
 
In this role, you will: 
Lead and mentor a team of TPMs across security-focused initiatives, by setting direction, operating models, and performance expectations.
 
Oversee the end-to-end program strategy and execution for OpenAI’s foundational security systems, including internal access controls, infrastructure hardening, secure-by-default development pipelines, and audit readiness.
 
Partner with engineering teams to deliver critical security outcomes including role-based access control (RBAC), secrets management, audit logging, monitoring, detection and response, and user-facing security and privacy controls.
 
Establish scalable frameworks and build programs around critical security initiatives including vulnerability management, evidence collection, incident response coordination, supply chain risk management, and device security.
 
Serve as the executive point of contact for aligning program execution with legal, policy, and regulatory requirements.
 
Create and maintain program-level visibility across risk areas, security milestones, and cross-org dependencies—ensuring outcomes are delivered reliably and at high quality.
 
You might thrive in this role if you: 
Are an empathetic communicator and leader—able to influence across technical and non-technical audiences, and build durable trust with partners.
 
Have
 
15+ years
 
of experience in technical program management, including
 
prior leadership of TPMs
 
or technical program teams.
 
Have served at the
 
Senior Manager, Director, or equivalent
 
level in a fast-paced, high-scale technology company; preferably with deep security and infrastructure exposure.
 
Have successfully led large-scale programs involving sensitive systems (e.g., access governance, secure deployment pipelines, audit logging, user data protections).
 
Are deeply fluent in the intersection of engineering systems, security controls, and regulatory expectations—and are able to bring clarity and structure across all three.
 
Thrive in high-trust environments, bring rigor and systems thinking to ambiguity, and operate with a bias for aligned execution over org boundaries.
 
About OpenAI
 
OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity.
 
We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic.
 
For additional information, please see
 
OpenAI’s Affirmative Action and Equal Employment Opportunity Policy Statement
 
.
 
Background checks for applicants will be administered in accordance with applicable law, and qualified applicants with arrest or conviction records will be considered for employment consistent with those laws, including the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, for US-based candidates. For unincorporated Los Angeles County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: protect computer hardware entrusted to you from theft, loss or damage; return all computer hardware in your possession (including the data contained therein) upon termination of employment or end of assignment; and maintain the confidentiality of proprietary, confidential, and non-public information. In addition, job duties require access to secure and protected information technology systems and related data security obligations.
 
To notify OpenAI that you believe this job posting is non-compliant, please submit a report through
 
this form
 
. No response will be provided to inquiries unrelated to job posting compliance.
 
We are committed to providing reasonable accommodations to applicants with disabilities.
 
OpenAI Global Applicant Privacy Policy
 
At OpenAI, we believe artificial intelligence has the potential to help people solve immense global challenges, and we want the upside of AI to be widely shared. Join us in shaping the future of technology.
 
Compensation
 
$207K – $355K + Offers Equity • Multiple Ranges

Security Technical Program Manager, Lead

Los Alamos National Laboratory

<div>What You Will Do 
 
Join our world-class team! Now is your chance to make a difference in supporting our national security mission. The Secure Networks and Assurances Group in the Weapons Research Services Division is looking for an experienced Science &amp; Engineering Program Manager (PM) to join our team. The PM will work closely with the nuclear weapons Cyber Assurance Laboratory (NWCAL) Director and technical staff to ensure that NWCAL's strategic objectives and vision are executed. The PM will collaborate with the Nuclear Enterprise Assurance (NEA) Program and Project Managers to ensure NEA requirements and tasking are met in a timely and quality manner. The PM will also manage high-level programs and projects for NWCAL to include R&amp;D projects at several universities, collaboration and cyber capability stand-ups at other NNSA sites, plants, and laboratories, and will spearhead new lines of effort to increase LANL's cyber assurance capability through leading and managing internal and external resources. 
 
What You Need 
 
Minimum Job Requirements: 
 
This position will be filled at either the Science/Engineering Program Manager 3 or 4 level, depending on the skills of the selected candidate. Additional job responsibilities (outlined below) will be assigned if the candidate is hired at the higher level. 
 
Science/Engineering Program Manager 3 $138,500 - $233,200 
At this level the Science/Engineering Program Manager 3 (S/E PM 3) will be responsible for managing and executing complex science and engineering projects that support the laboratory's cyber assurance and national security mission. This includes developing and implementing project plans, managing scope, schedule, and budget, tracking milestones and deliverables, and coordinating with internal and external stakeholders such as Department of War (DoW), National Security Agency (NSA), National Nuclear Security Administration (NNSA), Department of Energy (DOE), and universities. The S/E PM 3 will works closely with the NWCAL Director to translate strategic objectives into operational plans, manage multi-year R&amp;D efforts, and oversee technical contracts and service-level agreements. 
 
Science/Engineering Program Manager 4 $150,300 - $260,800 
Including the above, additional duties for the Science/Engineering Program Manager 4 (S/E PM 4) include providing advanced strategic and operational leadership for large-scale, complex programs across the nuclear weapons enterprise. The S/E PM 4 develops and drives long-term strategies, leads risk identification and mitigation planning, and advises leadership on programmatic decisions to ensure mission success. This higher-level position requires expert knowledge of technical and operational program management, advanced experience managing multi-institutional projects, and the ability to coordinate with senior-level program directors and government offices. The S/E PM 4 also oversees performance metrics and communications with national program offices (such as Deputy Directorate for Weapons, Global Security, and NNSA/Chief Information Officer), integrates enterprise-wide efforts, and aligns resources to meet strategic priorities. 
 
What You Need 
Minimum Job Requirements: 
 
Collaboration 
Demonstrated ability to work independently with a wide range of technical and non-technical managers and customers. Ability to work across the laboratory with various organizations (FOD, ASM, I&amp;T, S&amp;S, ISSM, ISSOs, DSOs, ESOs) to enable project-program execution with high quality. Ability to work with senior level collaborators with various external organizations to include DoW, NSA, NNSA, DOE, and various universities. Familiarity with manufacturing systems, cyber physical systems, software development and assurance, cyber security, or other operational technology. Demonstrated experience establishing and managing Service Level Agreements (SLAs) and external contracts that are technical in nature. Experience managing multi-year R&amp;D projects and teams, where exploratory research capitalizes on successes iteratively through the operationalization of these projects to increase work efficiency or mitigate program risk. The successful candidate will also be able to help the NWCAL Director set and implement long term strategic goals and integrate NWCAL efforts with multiple internal and external collaborators. 
 
Project Management 
Experience providing operational planning for the execution of complex science and engineering project(s) and applies technical or operational knowledge and experience to achieve project objectives. Advanced knowledge of technical or operational program management, including developing project plans and work breakdown structures, managing to scope, schedule and budget. This will include managing operational assessments, interfacing with program directors, coordinating response events, and working with the NWCAL Program manager on budget and personnel forecasting. Experience tracking milestones, objectives, and deliverables across NWCAL's portfolio. This includes monthly, quarterly, semiannual, and annual metrics, quad-charts, and other forms of communication to multiple program offices (DDW, GS, NNSA/CIO, etc.). Identifies potential project risks, developing risk 
 
Additional Job Requirements for Science/Engineering Program Manager 4: 
 
Project Management 
Wide-ranging experience providing strategic and operational planning for the execution of complex science and engineering project(s) and applies advanced technical or operational knowledge and experience to achieve project objectives. Expert knowledge of technical or operational program management, including developing project plans and work breakdown structures, managing to scope, schedule and budget. This will include managing operational assessments, interfacing with other program directors, coordinating response events, and working with the NWCAL Program manager on budget and personnel forecasting. 
Advanced experience tracking milestones, objectives, and deliverables across NWCAL's portfolio. This includes monthly, quarterly, semiannual, and annual metrics, quad-charts, and other forms of communication to multiple program offices (DDW, GS, NNSA/CIO, etc.). Identifies potential project risks, developing risk mitigation strategies with leadership and SMEs, and recommending risk avoidance for all aspects of the project(s). 
 
Training/Certifications: To be considered for the Science/Engineering Program Manager 4 level - a Project Management Institute certification is preferred for this level in addition to the education requirements below. 
 
Education/Experience at Science/Engineering Program Manager 3: Position requires a bachelor's degree in a science or engineering related field from an accredited institution and 8 years of directly related experience; or an equivalent combination of education and experience directly related to the occupation. At this level an advanced degree is typically expected. 
Education/Experience at Science/Engineering Program Manager 4: Position requires a bachelor's degree in a science or engineering related field from an accredited institution and 12 years of directly related experience; or an equivalent combination of education and experience directly related to the occupation. At this level an advanced degree is typically expected. 
 
Note to Applicants: 
Due to federal restrictions contained in the current National Defense Authorization Act, citizens of the People's Republic of China-including the special administrative regions of Hong Kong and Macau-as well as citizens of the Islamic Republic of Iran, the Democratic People's Republic of Korea (North Korea), and the Russian Federation, who are not Lawful Permanent Residents (&quot;green card&quot; holders) are prohibited from accessing facilities that support the mission, functions, and operations of national security laboratories and nuclear weapons production facilities, which includes Los Alamos National Laboratory.
 
 
Along with your resume, please include a detailed cover letter explaining how you meet each of the minimum requirements and any of the desired qualifications.
 
Where You Will Work 
 
Located in beautiful northern New Mexico, Los Alamos National Laboratory (LANL) is a multidisciplinary research institution engaged in strategic science on behalf of national security. Our generous benefits package includes: 
 
&sect; PPO or High Deductible medical insurance with the same large nationwide network 
 
&sect; Dental and vision insurance 
 
&sect; Free basic life and disability insurance 
 
&sect; Paid childbirth and parental leave 
 
&sect; Award-winning 401(k) (6% matching plus 3.5% annually) 
 
&sect; Learning opportunities and tuition assistance 
 
&sect; Flexible schedules and time off (PTO and holidays) 
 
&sect; Onsite gyms and wellness programs 
 
&sect; Extensive relocation packages (outside a 50 mile radius) 
Additional Details 
 
Directive 206.2 - Employment with Triad requires a favorable decision by NNSA indicating employee is suitable under NNSA Supplemental Directive 206.2. Please note that this requirement applies only to citizens of the United States. Foreign nationals are subject to a similar requirement under DOE Order 142.3A. 
 
Clearance: Q/SCI (Position will be cleared to this level). Selected applicants will be subject to a background investigation conducted by or on behalf of the Federal Government, and must meet eligibility requirements* for access to classified matter. This position requires a Q clearance. and obtaining such clearance requires US Citizenship except in extremely rare circumstances. Dependent upon the position, additional authorization to access classified information may be required, which may or may not be available to dual citizens. Receipt of a Q clearance and additional access authorization ultimately is a decision of the Federal Government and not of Triad. 
 
<ul><li>Eligibility requirements: To obtain a clearance, an individual must be at least 18 years of age; U.S. citizenship is required except in very limited circumstances. See DOE Order 472.2 for additional information.</li></ul> 

New-Employment Drug Test: The Laboratory requires successful applicants to complete a new-employment drug test and maintains a substance abuse policy that includes random drug testing. Although New Mexico and other states have legalized the use of marijuana, use and possession of marijuana remain illegal under federal law. A positive drug test for marijuana will result in termination of employment, even if the use was pre-offer.
 
 
Regular position: Term status Laboratory employees applying for regular-status positions are converted to regular status. 
 
Internal Applicants: Regular appointment employees who have served the required period of continuous service in their current position are eligible to apply for posted jobs throughout the Laboratory. If an employee has not served the required period of continuous service, they may only apply for Laboratory jobs with the documented approval of their Division Leader. Please refer to Policy Policy P701 for applicant eligibility requirements. 
 
Incentive Compensation Program: Position is eligible to participate in the Triad Incentive Compensation Program. You must be in an eligible position for a minimum of 3 months, before July 1st and remain in an eligible position as of the end of the fiscal year, September 30th. The annual distribution is prorated based on the number of months in the eligible position.
 
Equal Opportunity: Los Alamos National Laboratory is an equal opportunity employer. All employment practices are based on qualification and merit, without regard to protected categories such as race, color, national origin, ancestry, religion, age, sex, gender identity, sexual orientation, marital status or spousal affiliation, physical or mental disability, medical conditions, pregnancy, status as a protected veteran, genetic information, or citizenship within the limits imposed by federal, state, and local laws and regulations. The Laboratory is also committed to making our workplace accessible to individuals with disabilities and will provide reasonable accommodations, upon request, for individuals to participate in the application and hiring process. To request such an accommodation, please send an email to applyhelp@lanl.gov or call (505)-664-6947 opt. 3.</div>

Nuclear Weapons Cyber Assurance Program Manager (Science/Engineering Program Manager 3/4)

OnIT

<div><h2 class="jobSectionHeader">About Onit</h2><h2 class="jobSectionHeader">
We're redefining the future of legal operations through the power of AI. Our cutting-edge platform streamlines enterprise legal management, matter management, spend management and contract lifecycle processes, transforming manual workflows into intelligent, automated solutions.</h2><h2 class="jobSectionHeader">
We&rsquo;re a team of innovators using AI at the core to help legal departments become faster, smarter, and more strategic. As we continue to grow and expand the capabilities of our new AI-centric platform, we&rsquo;re looking for bold thinkers and builders who are excited to shape the next chapter of legal tech.</h2><h2 class="jobSectionHeader">
If you're energized by meaningful work, love solving complex problems, and want to help modernize how legal teams operate, we&rsquo;d love to meet you.</h2><h2 class="jobSectionHeader">
Position Summary</h2>
Onit is seeking a Technical Program Manager to lead the delivery of world-class security and compliance solutions across our SaaS platforms. This role will collaborate closely with Security &amp; Compliance, Infrastructure, and Product teams to drive initiatives that ensure our systems and services meet the highest standards of security and regulatory compliance 
 
Key Responsibilities<ul><li>
Project Leadership: Drive cross-functional initiatives to deliver security and compliance solutions, including resource planning, timeline management, and coordination with external vendors.</li><li>
Remediation Tracking: Monitor and manage remediation efforts across applications and infrastructure for issues identified via scans, assessments, and customer feedback.</li><li>
Managed Security and Compliance BAU activities: Manage and track the execution of key security and compliance such as access reviews, WAF reviews, and other quarterly and yearly BAU activities required by our security and compliance certifications and customer contracts.</li><li>
Security Champion Program: Facilitate the rollout and adoption of the program across teams to level up security knowledge for security champions, increase security visibility with tooling, and other key practices.</li><li>
Vanta Adoption and Implementation: Oversee the continued adoption and integration of Vanta for automated compliance monitoring.</li><li>
Vendor Management: Support selection, onboarding, and coordination of vendors for penetration testing, audits, and other security services.</li><li>
Security Reviews: Facilitate and participate in technical discussions and evaluate system designs for security strengths and weaknesses.</li><li>
Product Ownership: Act as product owner for security and compliance initiatives. This includes creating user stories, prioritizing work, and guiding teams through grooming and delivery.</li><li>
Global Collaboration: Work with teams across India, the U.S., and other regions to define, design, and deliver secure SaaS solutions.</li><li>
Process Improvements: Assist with process improvements with incident response, training, runbook definition, and other key areas of the security and compliance program.</li><li>
Security and Compliance Reporting: Maintain, track and report key performance indicators/metrics for various activities in security and compliance.</li><li>
Documentation and Training: Assist with documenting key practices within the security and compliance function to improve visibility and adoption</li></ul>
<h2 class="jobSectionHeader">
Required Skills</h2><ul><li>
10+ years in technical project management or similar leadership roles.</li><li>
5+ years in security and compliance domains.</li><li>
Strong technical background in the cybersecurity domain which includes experience with security tooling, vulnerability management, 3rd party penetration testing, incident response, thread detection, etc.</li><li>
Proven track record executing security and compliance projects for Enterprise SaaS solutions.</li><li>
Extensive experience managing the security of cloud-based applications (AWS preferred)</li><li>
Ability to navigate trade-offs and prioritize across multiple teams.</li><li>
Proficiency in agile methodologies and tools (e.g., Jira, Scrum, Kanban).</li><li>
Experience with security and compliance frameworks such as SOC2, NIST, and ISO 27001.</li><li>
Strong communication, problem-solving, and collaboration skills.</li><li>
Experience with EDR, CSPM, and SEIM security tooling</li><li>
Relevant certifications (CISSP, CCSP, CISM, AWS Security Specialty) are a plus</li><li>
Regulatory, compliance, or legal experience is a plus</li><li>
Experience with containerized applications is a plus</li></ul>
hjdhmUSf5U</div>

Technical Program Manager – Security & Compliance

Prime Care Qatar

Position Overview: The Chief Information Security Officer (CISO) is a senior executive responsible for establishing and maintaining the organization's vision, strategy, and program to ensure that information assets, technologies, and data are adequately protected. The CISO will lead efforts to identify, evaluate, and mitigate risks to the organization, implement robust security strategies, and oversee the continuous improvement of a secure enterprise environment. The CISO will also actively monitor and intervene whenever necessary to mitigate security problems that may arise, ensuring prompt and effective response to any security incidents.Key Responsibilities:Strategic Leadership:<ul><li>Develop, implement, and monitor a comprehensive enterprise information security and risk management program.</li><li>Align the security program with business objectives, ensuring compliance with industry regulations and standards.</li><li>Advocate for security awareness across the organization.</li></ul>Risk Management:<ul><li>Conduct regular risk assessments to identify potential threats and vulnerabilities.</li><li>Develop and maintain risk treatment plans to mitigate or eliminate risks to acceptable levels.</li><li>Oversee incident response planning and disaster recovery strategies.</li><li>Actively monitor the enterprise environment for security issues and intervene directly as needed to address emerging threats or incidents.</li></ul>Policy and Compliance:<ul><li>Establish and enforce security policies, procedures, and standards.</li><li>Ensure compliance with applicable laws, regulations, and industry frameworks (e.g., GDPR, ISO 27001, HIPAA, NIST).</li><li>Act as the primary point of contact for audits and security-related inquiries.</li></ul>Technology Oversight:<ul><li>Evaluate, acquire, and implement security solutions and technologies.</li><li>Ensure the secure design, architecture, and deployment of IT systems and applications.</li><li>Manage the organization's Security Operations Center (SOC), if applicable.</li></ul>In the absence of a dedicated security team, the CISO is expected to work hands-on to implement, manage, and monitor technical security controls, enforce access management policies, and directly respond to security incidents across systems and networks.Collaboration and Communication:<ul><li>Work with stakeholders across departments to integrate security into business operations.</li><li>Provide regular reporting on security metrics, incidents, and progress to the executive team and board of directors.</li><li>Engage with external partners, vendors, and consultants for security solutions and best practices.</li></ul>Team Management:<ul><li>Build and lead a high-performing information security team.</li><li>Provide training, mentorship, and career development for security personnel.</li><li>Foster a culture of accountability and continuous improvement within the security team.</li></ul>Key Performance Indicators (KPIs):<ul><li>Reduction in security incidents and breaches.</li><li>Compliance with regulatory requirements and audits.</li><li>Implementation of security strategies within defined timelines.</li><li>Security awareness levels among employees.</li><li>Incident response and recovery times.</li></ul>Job Type: Full-time

Chief Information Security Officer (CISO)

Google

<div><h3 class="jobSectionHeader">Minimum qualifications:</h3><ul>
<li>Bachelor's degree or equivalent practical experience.</li>
<li>2 years of experience in program or project management, leading multi-disciplinary projects.</li>
<li>Experience managing programs related to Compliance, Safety, or Risk Management.</li>
<li>Experience in AI/ML systems, wit a focus in Google Cloud Platform (GCP), Vertex AI, and BigQuery.</li>
<li>Experience in applying Agile Project Management methodologies for de-risking and auditing technical programs.</li></ul> 
<h3 class="jobSectionHeader">
Preferred qualifications:</h3><ul>
<li>Understanding of security operations principles, architectures, technologies, and challenges.</li>
<li>Ability to learn and apply new technologies and systems with minimal guidance.</li>
<li>Ability to work in a dynamic, fast-paced environment and pivot as project needs and emerging company priorities.</li>
<li>Ability to have a portfolio of successful technical program management in fields relevant to data orchestration, visualization, and automation.</li>
<li>Excellent communication skills tailored for audiences coupled with robust planning and execution capabilities.</li>
</ul><div><h2 class="jobSectionHeader">About the job</h2>
A problem isn&rsquo;t truly solved until it&rsquo;s solved for all. That&rsquo;s why Googlers build products that help create opportunities for everyone, whether down the street or across the globe. As a Technical Program Manager at Google, you&rsquo;ll use your technical expertise to lead complex, multi-disciplinary projects from start to finish. You&rsquo;ll work with stakeholders to plan requirements, identify risks, manage project schedules, and communicate clearly with cross-functional partners across the company. You're equally comfortable explaining your team's analyses and recommendations to executives as you are discussing the technical tradeoffs in product development with engineers.
Behind everything our users see online is the architecture built by the Technical Infrastructure team to keep it running. From developing and maintaining our data centers to building the next generation of Google platforms, we make Google's product portfolio possible. We're proud to be our engineers' engineers and love voiding warranties by taking things apart so we can rebuild them. We keep our networks up and running, ensuring our users have the best and fastest experience possible.</div><div><h2 class="jobSectionHeader">
Responsibilities</h2><ul>
<li>Act as the liaison between the security and AI/ML teams to ensure the Vertex AI and Gemini in Security agents have high-fidelity, low-latency access to contextual data from Spanner Graph.</li>
<li>Architect and develop robust data pipelines to ingest, process, and transform structured, semi-structured, and unstructured data from various security tools.</li>
<li>Lead the definition, implementation, and continuous refinement of the Autonomous Response Agent's playbooks in to ensure swift, machine-speed containment.</li>
<li>Utilize agile methodologies and other program management tools to enhance team effectiveness and project delivery.</li>
<li>Govern and build the pipeline for sensitive enterprise data, ensuring Data flow is correctly configured to perform mandated data minimization, pseudonymization, and anonymization.</li>
</ul></div>Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.</div>

Technical Program Manager, Compliance, Safety and Risk Management

<div><h3 class="jobSectionHeader">Minimum qualifications:</h3><ul>
<li>Bachelor's degree in a technical field, or equivalent practical experience.
 
</li><li>8 years of experience in program management.
 
</li><li>5 years of experience in leadership role with/without direct reports. 
</li>
<li>3 years of experience in security or risk management.</li></ul> 
<h3 class="jobSectionHeader">
Preferred qualifications:</h3><ul>
<li>8 years of experience managing cross-functional/team projects. 
</li>
<li>Experience with various risk assessment methodologies (e.g., US CERT&rsquo;s OCTAVE Allegro, NIST 800-30 framework).</li>
<li>Strong understanding of payments systems, infrastructure, and regulatory requirements (e.g., GLBA, PCI DSS, HIPAA, SSAE-16/18, FTC Consent Decree).</li>
<li>Familiarity with AI research and acceleration concepts, particularly in the context of security.</li>
</ul><div><h2 class="jobSectionHeader">About the job</h2>
Google's projects, like our users, span the globe and require managers to keep the big picture in focus while being able to dive into the unique engineering challenges we face daily. As a Technical Program Manager at Google, you lead complex, multi-disciplinary engineering projects using your engineering expertise. You plan requirements with internal customers and usher projects through the entire project lifecycle. This includes managing project schedules, identifying risks and clearly communicating them to project stakeholders. You're equally at home explaining your team's analyses and recommendations to executives as you are discussing the technical trade-offs in product development with engineers. 
 
Using your extensive technical and leadership expertise, you manage various Engineering-specific programs and teams.
<div>
We seek to foster a culture of collaboration and clarity in Payments products and stakeholders by enabling them to proactively identify, assess, and manage risks and vulnerabilities in areas of risk, vulnerability, incident, and access management and pen testing, all in line with industry best practices and regulatory mandates.</div> 
<div></div>
As the Technical Program Manager (TPM) you will join our Payments Vulnerability, Risk, Access, Incident Management, and Pentesting (VRAM) team. This role is critical in ensuring the continued protection of Payments products and users by maintaining high standards of security and privacy.
Whether it is paying online with Autofill, using tap and pay in stores, or using the Google Pay app, the Payments team at Google is focused on making payments simple, seamless, and secure. In addition to consumer payment technologies, the Payments team also powers the money movement between Google and its consumers and businesses.
The US base salary range for this full-time position is $183,000-$271,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.
Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.</div><div><h2 class="jobSectionHeader">
Responsibilities</h2><ul>
<li>Own and lead vulnerability management efforts, including transitioning responsibilities and vendor relationships.</li>
<li>Drive incident management processes, focusing on improving operational effectiveness, particularly handoffs between core teams and Payments. Lead the PgM efforts to drive incident resolution.</li>
<li>Oversee exploratory pentesting projects, including managing relationships with external vendors like Mandiant. Collaborate with Security Engineering, Privacy, and other Payments teams to define scope, prioritize services, and ensure robust security practices.</li>
<li>Lead and manage the risk management program, including the implementation of tools like SPUR. Oversee Business Continuity and Resiliency Planning (BCP), Business Impact Analysis (BIA), and Disaster Recovery Testing, ensuring annual updates to the &quot;GPC BCP&quot; document.</li>
<li>Ensure compliance with regulatory requirements, including reviewing work for the European Central Bank and assisting with Enterprise Risk Assessments.</li>
</ul></div>Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.</div>

Technical Program Manager, Payments Vulnerability and Risk Management

Rolls Royce

Job Description Job Title: Contractor Program Security Officer (CPSO) Working Pattern: Fulltime - onsite (WFH every other Friday) Working location: Indianapolis, IN Rolls-Royce is in search of a multi-faceted security professional in support of multiple USG Defense programs. As the Contractor Program Security Officer (CPSO), you will act as the primary accountable person for our sensitive programs; however, you will work within a core team of CPSOs. Our other CPSO and Assistant CPSO will accompany you in attending meetings, routine engagements with the Program Management Office and more. Why Rolls-Royce? Rolls-Royce is one of the most enduring and iconic brands in the world and has been at the forefront of innovation for over a century. We design, build and service systems that provide critical power to customers where safety and reliability are paramount. We are proud to be a force for progress, powering, protecting and connecting people everywhere. We want to ensure that the excellence and ingenuity that has shaped our history continues into our future and we need people like you to come and join us on this journey. Rolls-Royce has been recognized as the top employer in the Engineering & Manufacturing category on the prestigious Forbes Top Employers for Engineers list for 2025. This ranking highlights our commitment to innovation, employee development, and fostering a collaborative environment where engineers can thrive. At Rolls-Royce, we are committed to creating a workplace where all employees feel respected, supported, and empowered to do their best work. We foster a welcoming and innovative work environment that invests in you, giving you access to an incredible breadth and depth of opportunities where you can grow your career and make a difference. Rolls-Royce is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to any protected characteristics. What you will be doing: With this attractive opportunity you will be the gatekeeper for access, and the enforcer as it pertains to policies, compliance, and maintenance of program under our purview. The candidate will ultimately report to the Facility Security Officer (FSO). Key Responsibilities: <ul><li>Assist the Facility Security Officer (FSO): Specifically in the enforcement of policies and procedures to ensure that national security, sensitive information, intellectual property, and company personnel & assets are safeguarded in accordance with: DoD Manual 5205.07; 32 CFR Part 117 (NISPOM); ICD 705; and any other relevant guidance manuals or Security Directives. </li><li>Supports the Information Systems Security Managers (ISSMs) and Information Systems Security Officers (ISSOs) as it pertains to accountable items such as media and transfers, through document control measures. </li><li>Prepare and review administrative documentation, program access request forms, visitor control, and resolve program-related security issues. </li><li>Administer indoctrinations, program specific training, and debriefs. </li><li>Conduct investigations, security reviews, annual security trainings. </li><li>Complete annual self-inspections. </li><li>Oversees physical security requirements to ICD-705 standards; as well as provide input/oversight to any facility maintenance and upgrades. </li><li>Reviews all contractual requirements in DD Form 254s to extract security obligations; ensuring leadership remains cognizant of security-related concerns, in regard to new and existing programs. </li><li>Develop, implement, and enforce security plans, Standard Operating Procedures (SOPs), and policies specific to each program. </li></ul> Who we're looking for: At Rolls-Royce we put safety first, do the right thing, keep it simple and make a difference. These principles form the behaviours that guide us and are an essential component of our assessment process. They are the fundamental qualities that we seek for all roles Basic Requirements: <ul><li>Must have or be able to obtain a US DoD Top Secret Security Clearance. Must be US Citizen. </li><li>Bachelor's degree with 5+ years of corporate security, government security, regulatory compliance, and /or risk management experience. </li><li>A Master s degree with 3+ years of corporate security, government security, regulatory compliance, and /or risk management experience. OR; </li><li>A JD/PhD with 0 years experience OR; </li><li>In lieu of degree, 9+ years of corporate security, government security, regulatory compliance, and /or risk management experience. </li><li>Experience with security systems such as DISS, JADE, CORE and Savannah. </li><li>Excellent organizational and project management skills. </li><li>Strong communication and interpersonal skills. </li></ul> Preferred Requirements: <ul><li>Prior security program management experience. </li><li>Extensive SAP / industrial security experience </li><li>Experience working on multiple projects simultaneously with critical deadlines. </li><li>Extensive experience in security education (in-brief/out-brief), and training newly accessed personnel across a diverse work environment. </li></ul> What we offer: We offer excellent development opportunities, a competitive salary, and exceptional benefits. These include bonus, employee support assistance and employee discounts. Your needs are as unique as you are. Hybrid working is a way in which our people can balance their time between the office, home, or another remote location. It's a locally managed and flexed informal discretionary arrangement. As a minimum we're all expected to attend the workplace for collaboration and other specific reasons, on average three days per week. Job Category Security and Resilience Job Posting Date 22 Oct 2025; 00:10 Pay Range $99,987 -$162,479-Annually Location: Indianapolis, IN Benefits Rolls-Royce provides a comprehensive and competitive Total Rewards package that includes base pay and a discretionary bonus plan. Eligible employees may have the opportunity to enroll in other benefits, including health, dental, vision, disability, life and accidental death & dismemberment insurance; a flexible spending account; a health savings account; a 401(k) retirement savings plan with a company match; Employee Assistance Program; Paid Time Off; certain paid holidays; paid parental and family care leave; tuition reimbursement; and a long-term incentive plan. The options available to an employee may vary depending on eligibility factors such as date of hire, employment type, and the applicability of collective bargaining agreements. PandoLogic. Category:Technology,

Contractor Program Security Officer (CPSO)

Search 10000+ Security program manager jobs near you this November. New roles added regularly across leading industries. Apply today.