BeyondTrust is a place where you can bring your purpose to life through the work that you do, creating a safer world through our cybersecurity SaaS portfolio.
Our culture of flexibility, trust, and continual learning means you will be recognized for your growth and for the impact you make on our success. You will be surrounded by people who challenge, support, and inspire you to be the best version of yourself.
The Role
As a Senior Security Technical Program Manager at BeyondTrust, you will use your technical expertise, business acumen and security domain knowledge to manage and streamline critical CISO Office operations and programs. In this role, you will be an advocate for building seamless and metrics-driven operational frameworks. You will be responsible for working collaboratively with CISO Office teams and business stakeholders to identify operational gaps, document requirements and needs, metrics visualization, and execute programs to streamline the way BeyondTrust build and retains customer trust.
What You’ll Do
- Oversee, plan, and manage security initiatives for all security pillars.
- Serve as the Security TPM for the security issues management program, running the end-to-end lifecycle on the security issues management Jira board from identification and triage through handoff, validation, closure, and reporting.
- Triage every new issues against the priority rubric (exploitability, blast radius, data sensitivity, regulatory or audit linkage, and compensating controls), confirm or adjust the Reporter’s initial priority, and set a due date at triage, hand off to Assignee as identified.
- Own Critical and High issues day to day, including executive notification, direct engagement with the Assignee, unblocking dependencies, and fast-tracking validation. Monitor additional issues through the recurring security issues management review and step in when an escalation trigger fires.
- Enforce the analysis gate before handoff, approving a ticket as handoff-ready only when root cause, a specific recommended remediation, named impacted systems and teams, and verifiable acceptance criteria are documented.
- Identify the correct accountable Assignee by role, run a single structured handoff meeting, and drive formal acceptance in Jira within the agreed window.
- Confirm Assignee remediation plans meet the acceptance criteria without redesigning them, and help surface cross-team dependencies such as budget, tooling, or other teams.
- Run the recurring cross-functional security issues review, require an updated due date and logged reason for any slippage, and act as decision-maker on priority and acceptance-criteria disputes, escalating unresolved disagreements to the Sponsor.
- Formally close security issues only after independent Security validation passes, and reopen failed validations to the Assignee with the specific gap noted.
- Maintain security issues management board hygiene, including identifying duplicate or overlapping tickets, consolidation opportunities, and tickets missing descriptions, due dates, or owners.
- Lead the Cloud Governance program to convert eligible cloud-scoped remediations into enforceable Kion guardrails.
- Create detailed project plans to support each initiative while defining and supporting metric visualization for all of BT.
- Provide a steady stream of ideas and solutions during security initiatives to introduce innovation and improve operational efficiency.
- Implement relevant metrics to measure security specific program success, including the security issues management program health (open and closed volume by priority tier, overdue tickets, tickets not yet accepted, and due-date slippage).
- Develop reports to communicate program progress, including the monthly rollup and the quarterly Sponsor program review, to leadership and cross-functional stakeholders.
What You’ll Bring
- Bachelor's degree in technology, Business Administration, Computer Science, or related field
- 5-7 years of relevant professional experience in security, project management, or technology
- Proficient level of understanding security domains
- Experience in communicating technical concepts to non-technical audiences and vice versa.
- Experience with creative problem solving in a fast-paced and ever-changing environment.
- Experience in Security or Cloud software solutions
- Ability to recognize, evaluate and reduce program risks
- Excellent stakeholder management skills
- Demonstrated experience running a security findings, vulnerability management, or audit remediation program across multiple engineering and business teams, from intake and prioritization through verified closure
- Experience applying structured risk-scoring methods (e.g., CVSS or a weighted rubric) consistently and defending prioritization decisions with stakeholders
- Proven ability to drive accountability with owners outside your reporting line, including formal handoffs, acceptance, and escalation to senior leadership
- Hands-on experience with Jira workflows, JQL, and dashboards for program tracking and reporting
- Working knowledge of compliance frameworks and audit evidence (e.g., SOC 2, ISO 27001)
Nice To Have
- Security certification, e.g. CISA, CISSP; program management certification, e.g. PMP
- Strong business acumen
- Big picture thinker and self-starter
- Excellent time management and organizational skills
- Experience working for a fast paced, SaaS company
- Strong spoken and written communication skills
- Experience with cloud security posture management or policy-as-code guardrails in AWS, Azure, or GCP (e.g., Kion)
- Experience using automation or AI to streamline finding triage, validation, or program reporting
Better Together
Diversity. Inclusion. They’re more than just words for us. They are the guiding values of how we build our teams, cultivate leaders, and create a culture where people feel connected.
We take care of our employees so they can take care of our customers. Customers who come from all walks of life just like us. We hire incredible people from diverse backgrounds because when we are different together, we are stronger together.
About Us
BeyondTrust is the global identity security leader protecting Paths to Privilege™. Our identity-centric approach goes beyond securing privileges and access, empowering organizations with the most effective solution to manage the entire identity attack surface and neutralize threats, whether from external attacks or insiders.
BeyondTrust is leading the charge in transforming identity security to prevent breaches and limit the blast radius of attacks, while creating a superior customer experience and operational efficiencies. We are trusted by 20,000 customers, including 75 of the Fortune 100, and our global ecosystem of partners.
Learn more at www.beyondtrust.com.
#LI-DF1
