Senior Technical Program Manager, Lantern

• The ideal candidate has a strong PMO background, proven ability to manage complex security portfolios, and hands-on knowledge of governance, risk, and compliance frameworks
• 5+ years of program/project management experience within Information Security, IT, or Infrastructure domains
• Proven experience in security governance, compliance, and risk management frameworks (e.g., NIST CSF, HITRUST, SOC)
• Strong knowledge of security tool implementation (MDR, IAM, DLP, OneTrust)
• Jira knowledge
• Experience leading portfolio-level program management, including intake, prioritization, and capacity planning
• Track record of delivering large-scale projects with high on-time and in-scope success rates
• Excellent communication, stakeholder management, and executive reporting skills
• Must demonstrate flexibility and excellent organizational skills with the ability to complete various tasks accurately with high attention to detail and creativity
• Develop, manage, and maintain customer relationships at all organizational levels
• Excellent soft skills to handle stress and resolve conflicts
• Ability to maintain confidentiality
• Be Proactive, Self-Driven, Fast-Learner, and Accountable

Desirable

• Lantern is seeking a Senior Technical Program Manager (TPM) with in-depth expertise in Information Security, governance, and program management to drive the execution of critical Information Security and Infrastructure initiatives
• This role is responsible for driving and coordinating security initiatives, ensuring projects are delivered on time, within scope, and in alignment with compliance/business/enterprise goals
• You will partner closely with IT, Legal, Product, Security, and Infrastructure teams to establish governance structures, manage capacity planning, and deliver projects that strengthen the organization’s technical and operational readiness
• Implement and scale a unified portfolio management framework to prioritize and deliver InfoSec and Infrastructure initiatives aligned with enterprise goals
• Manage intake and prioritization processes, ensuring smooth execution and onboarding of new hires into meaningful project work
• Deliver 90%+ on-time, in-scope project execution across security and infrastructure portfolios. Manage timelines and deliverables for frameworks such as SOC, HIPAA, and GDPR
• Conduct quarterly portfolio reviews, connecting project outcomes, hiring efficiency, and resource utilization to business objectives
• Drive workforce and hiring alignment with portfolio needs
• Optimize resource allocation and track utilization to maximize program efficiency
• Establish and track KPI (e.g., time to restore service, vulnerability remediation SLAs, phishing resilience, audit readiness, etc.) and KRI (e.g., risk exposure, compliance gaps) to measure operational readiness
• Lead and manage assessments across:
• Physical Security
• Microsoft Security (Active Directory, Entra, M365)
• Cybersecurity (NIST CSF 2.0)
• HITRUST remediation initiatives
• Oversee adoption of tools and frameworks for incident, risk, and policy management (e.g. OneTrust)
• Oversee delivery of security initiatives, including:
• MDR tool implementation (Expel)
• Penetration Testing programs
• Data Loss Prevention tools
• Identity Access Management rollouts
• SOP updates and PagerDuty integration
• Disaster Recovery (DR) and Business Continuity Planning (BCP) Expertise
• Ability to develop and maintain DR/BCP policies, procedures, and runbooks
• Familiar with NIST
• Experience conducting BIA and Risk Assessment to identify critical processes and dependencies
• Knowledge of recovery time objectives (RTO), recovery point objectives (RPO), and tiered recovery strategies for different systems
• Leading Tabletop exercises, simulation testing, and complete failover tests for DR and continuity validation
• Assessing 3rd party vendor and partner DR/BCP capabilities as part of risk management
• Risk Management: Work with security engineers to identify, evaluate, and mitigate risks, balancing business needs with security requirements. Lead compliance and risk initiatives, including:
• OneTrust deployment for Incident Management, IT & Security Risk Management, 3rd-Party Risk, and Policy Management
• Questionnaire response automation and SOC audit support