Security Technical Program Manager, Handshake

• At least 5 years of experience in a technical program management role, preferably within information security
• Proven ability to work with cross-functional teams and influence the strategic direction of a hyper-growth environment
• Ability to set priorities and make high-judgment trade-offs between deliverables and speed-to-launch
• Proven experience in third-party risk management and customer-facing security roles
• Strong understanding of information security principles, frameworks (e.g., ISO 27001, NIST), and regulations (e.g., GDPR, CCPA)
• Experience with security risk assessment methodologies and tools
• Excellent communication skills with the ability to articulate complex security issues to a diverse audience
• Strong project management skills and the ability to manage multiple initiatives simultaneously

Desirable

• Handshake is looking for a technical Security Technical Program Manager who is passionate about building and embedding security into product development and has a track record for running successful programs such as vulnerability management, to join our team and help mature Handshake’s security
• In addition to engineering, this role will also partner with critical business functions such as product management, legal, privacy, and Go-to-market teams to ensure security risks are reviewed, remediated, and communicated in a timely manner
• Design and operationalize programs to achieve comprehensive product and infrastructure security vulnerability insight from internal and external emerging threats and risks
• Work with cross-functional teams of technical and non-technical stakeholders to interpret, communicate, and drive full lifecycle security programs
• Build programs, drive process improvements, and work with engineering teams and other stakeholders to develop innovative solutions to complex technical security challenges
• Serve as the primary point of contact for customer security inquiries and concerns related to Handshake’s product and cloud infrastructure
• Own and manage security risk reduction programs such as security penetration testing, red and blue teaming, and business continuity to scale Handshake’s security maturity
• Conduct security assessments of third-party vendors and partners to identify potential risks
• Work with legal, procurement, and other teams to ensure security requirements are included in contracts and service agreements
• Stay up-to-date with industry best practices and regulatory requirements related to third-party risk and customer data protection