Technical Program Manager, Security at Brainco · LumiJobs

Responsibilities

Drive security sales enablement operations: the operational backbone of the customer trust surface. Security questionnaires, RFP security sections, the trust portal, DPA/BAA intake, and customer security reviews. Build the reusable answer library, evidence packages, and intake process so no deal restarts from scratch and security is never the reason a cycle slips in close partnership with GRC.
Vendor Management Process: Complete Vendor Security Reviews for vendors that will be both internal/ corporate vendors and vendors supporting customer facing products/ services. Understanding the difference between what is required for each of those types of vendors. Awhile looking for ways and streamline our vendor management process.
Support audit readiness as a delivery program, not a scramble. Own the plan behind SOC 2 Type II and HIPAA today and the path through ISO 27001, NIST 800-171, and FedRAMP/GovRAMP, control owners, evidence collection, gap remediation tracking, auditor logistics, and readiness milestones, in close partnership with GRC.
Turn vulnerability management into a continuous, self-managing program that runs at machine speed. Definitions, SLAs by severity, automated routing to the engineering teams that own the fix, an exception process people actually use, and dashboards that stay current on their own — so the program reports itself and only the exceptions reach a human.
Support the planning and tracking of GRC-related continuous monitoring activities to ensure all necessary compliance related requirements are being met. This may include, proper access provisioning/deprovision tasks are being evidenced, access reviews are being performed in proper cadence, BCP and IR testing, configuration reviews, etc.
Drive security-heavy product launches as needed. Most launches won’t need you; some can’t ship without you. When security is load-bearing, such as government and healthcare deployments, multi-cloud environments, you’ll embed with the product and engineering teams and make sure threat modeling, security reviews, and sign-offs happen early enough to matter, with launch blockers surfaced before launch week.
Drive cross functional corporate security programs across the company SaaS security posture and shadow IT, identity, insider risk, physical and office security, and security awareness and phishing programs. These programs live in everyone’s workflow and nobody’s job description; you’ll give them owners, a cadence, and measurable coverage.
Drive security-heavy product launches as needed. Most launches won’t need you; some can’t ship without you. When security is load-bearing, government and healthcare deployments, on-prem environments, agent workloads running inside customer systems — you’ll embed with the product, engineering, security and IT teams and make sure dependencies and sign-offs happen early enough to matter, with launch blockers surfaced well before launching deadlines.
Own the operating process around incident management escalation paths, comms templates, tabletop exercises, incident commander support during live events, and post-incident reviews where the remediation items get driven to done, not filed.
Run the security team’s operating cadence: roadmap and planning, program status, metrics and reporting to leadership, third-party risk operations, and the strategic initiatives that show up mid-quarter without a plan attached.
Be the person who knows the state of the most critical security programs: who owns what, what’s at risk, what’s blocked, and what leadership needs to hear before they ask.
You Might Be a Great Fit If You...

Technical Program Manager, Security

Responsibilities

Qualification

Preferred

Benefits

Company

Brainco

More roles at Brainco