Senior Security Technical Program Manager

BeyondTrust is a place where you can bring your purpose to life through the work that you do, creating a safer world through our cybersecurity SaaS portfolio.

Our culture of flexibility, trust, and continual learning means you will be recognized for your growth and for the impact you make on our success. You will be surrounded by people who challenge, support, and inspire you to be the best version of yourself.

The Role

As a Senior Security Technical Program Manager at BeyondTrust, you will use your technical expertise, business acumen and security domain knowledge to manage and streamline critical CISO Office operations and programs. In this role, you will be an advocate for building seamless and metrics-driven operational frameworks. You will be responsible for working collaboratively with CISO Office teams and business stakeholders to identify operational gaps, document requirements and needs, metrics visualization, and execute programs to streamline the way BeyondTrust build and retains customer trust.

What You’ll Do

• Oversee, plan, and manage security initiatives for all security pillars.

• Serve as the Security TPM for the security issues management program, running the end-to-end lifecycle on the security issues management Jira board from identification and triage through handoff, validation, closure, and reporting.

• Triage every new issues against the priority rubric (exploitability, blast radius, data sensitivity, regulatory or audit linkage, and compensating controls), confirm or adjust the Reporter’s initial priority, and set a due date at triage, hand off to Assignee as identified.

• Own Critical and High issues day to day, including executive notification, direct engagement with the Assignee, unblocking dependencies, and fast-tracking validation. Monitor additional issues through the recurring security issues management review and step in when an escalation trigger fires.

• Enforce the analysis gate before handoff, approving a ticket as handoff-ready only when root cause, a specific recommended remediation, named impacted systems and teams, and verifiable acceptance criteria are documented.

• Identify the correct accountable Assignee by role, run a single structured handoff meeting, and drive formal acceptance in Jira within the agreed window.

• Confirm Assignee remediation plans meet the acceptance criteria without redesigning them, and help surface cross-team dependencies such as budget, tooling, or other teams.

• Run the recurring cross-functional security issues review, require an updated due date and logged reason for any slippage, and act as decision-maker on priority and acceptance-criteria disputes, escalating unresolved disagreements to the Sponsor.