Senior Technical Program Manager (Security)

Role Overview:
We are seeking a Senior Technical Program Manager to join a growing Security team, with focus on program delivery, driving portfolio management and operating model practices for Backblaze.

Key Responsibilities:
Lead end-to-end planning and execution of enterprise security programs (e.g., vulnerability management, incident response readiness, identity and access management, data protection, cloud security) from initiation through delivery
Communicate technical security concepts and program status clearly to both technical teams and non-technical stakeholders
Develop and maintain detailed program plans, timelines, budgets, and resource allocation across multiple concurrent security initiatives
Identify, track, and mitigate program risks and dependencies, escalating blockers to leadership with clear options and recommendations
Drive cross-functional coordination between engineering, product, legal, and third-party vendors to ensure security controls are implemented on schedule
Establish and report on program goals, dashboards, and status updates for executive and board-level audiences
Manage the intake, prioritization, and tracking of security findings, vulnerabilities, and remediation efforts across teams
Support incident response coordination, including post-incident reviews and follow-up action tracking
Continuously improve program management processes, tooling, and governance frameworks specific to security operations
Foster a culture of transparency and trust, apply lean value-driven approach, manage by influence, support and empower technical teams through servant leadership
In partnership with other TPMs, participate in implementation of continuous cross-functional process improvement initiatives

Qualifications:
Required Experience & Technical Qualifications:
Bachelor's degree in Computer Science, Information Security, Engineering, or a related field (or equivalent practical experience); Master's degree a plus
8+ years of technical program management experience, including 3+ years managing security-focused programs
Strong understanding of security domains: vulnerability management, threat modeling, identity and access management, network security, cloud security, and incident response
Familiarity with regulatory and compliance frameworks such as SOC 2, ISO 27001, NIST CSF, GDPR, HIPAA, or FedRAMP
Relevant security certifications, such as:
CISSP (Certified Information Systems Security Professional)
CISM (Certified Information Security Manager)
PMP (Project Management Professional) or PgMP (Program Management Professional)
CRISC (Certified in Risk and Information Systems Control)
CCSP (Certified Cloud Security Professional)
Cloud security certifications (e.g., AWS Certified Security – Specialty, Microsoft Certified: Security Operations Analyst Associate)

Other qualifications:
Ability to adapt agile management principles to a variety of development environments
Proven ability to manage multiple complex, cross-functional programs simultaneously in a fast-paced environment
Excellent written and verbal communication skills, with the ability to translate technical risk into business impact for executive audiences
Strong analytical and risk-assessment skills, with experience using program management and ticketing tools
Demonstrated ability to build trust and influence without direct authority across engineering, legal, and executive teams
High attention to detail, sound judgment under pressure, and comfort operating with ambiguity during active incidents
Experience with Atlassian & Google product suites a plus