Are you ready to take on a key leadership role in driving security and privacy initiatives at Moveworks and elevate our standards to new heights? Do you have a passion for working with cutting-edge AI/ML technologies and ensuring a robust security posture in a cloud-only environment at scale? If you're up for the challenge, we have an exciting opportunity for you.

As a Sr Security Technical Program Manager, you will play a critical role in safeguarding our products and services through effective vulnerability management, incident response, bug bounty, security/privacy metrics tracking, and partnerships with engineering teams. You will use your technical security knowledge to successfully drive programs and earn trust from engineers. Reporting directly to the Chief Information Security Officer, you will lead, drive, and monitor programs and initiatives to empower our engineering teams in building secure infrastructure at scale. You will be expected to innovate and improve in the space.

What you'll bring to the table

• 7+ years of experience in the Security/Privacy space as a Technical Program Manager (or equivalent)
• Strong understanding of vulnerability exposure and effective prioritization methods
• Proficiency in engaging stakeholders to handle security/privacy incidents
• Experience in improving, reporting, and measuring security/privacy metrics across an organization
• Familiarity with conducting external penetration testing programs
• Expertise in cloud infrastructure such as AWS, GCP, and/or Azure
• Previous experience in environments with compliance requirements (SOC2, HIPAA, ISO27001, FedRAMP, etc.)
• BS+ in computer science or a related field, or equivalent relevant experience
• Excellent written and verbal communication skills
• Strong relationship-building skills to influence and motivate diverse job functions
• Exceptional organizational abilities to manage multiple competing priorities effectively
• Ability to make objective decisions based on understanding complex concepts
• Eagerness to delve into problems, drive alignment, and assist with execution through well-documented plans.

Join us in shaping the future of AI security at the fastest-growing startup in this space. At Moveworks, we strike the balance between agility and security to deliver unparalleled value securely to our customers. If you're looking for a dynamic and challenging environment where your expertise can make a difference, apply now!

Responsibilities

Vulnerability Management Program: Take ownership of the vulnerability management program across all products and services. Identify, prioritize, and address vulnerabilities effectively to bolster our security measures.

Incident Response Process: Lead and manage the incident response process, engaging with teams, customers, and leadership. Ensure efficient and clear communications during incidents.

Bug Bounty Management: Collaborating with external security researchers to efficiently assess and categorize vulnerabilities, accurately gauge their impact, and uphold service level agreements (SLAs) during the engagement.

Security/Privacy Metrics and Reporting: Develop and track key security and privacy metrics company-wide. Use data-driven insights to continuously improve our security practices. Provide regular reports on security metrics, incidents, and the overall security posture to executive leadership and stakeholders.

Collaboration and Partnership: Work closely with software development and operations teams, enabling them to implement security and privacy initiatives seamlessly.

Secure and Privacy-Minded Solution: Collaborate with machine learning, search, product, infrastructure, data, and frontend teams to design elegant and secure solutions.

Risk Mitigation: Collaborate with all departments at Moveworks to understand business and technical risks, taking measures to reduce or mitigate them while enhancing our overall security and privacy posture.

Program Management: Efficiently manage complex and large-scale cross-team, cross-functional initiatives related to security and privacy.

Resource Management and Communication: Interface with engineering managers and engineers to estimate work efforts, define milestones, manage resources, and communicate progress to upper management and project stakeholders.

Obstacle Removal and Momentum: Proactively identify and remove obstacles, ensuring smooth progress. Handle issue escalations and support teams juggling competing priorities.

Results-Driven Approach: Demonstrate a proactive and results-oriented approach to achieve security objectives.

Compensation Range: $212,000 - $255,000

*Our compensation package includes a market competitive salary, equity for all full time roles, exceptional benefits, and, for applicable roles, commissions or bonus plans.

Ultimately, in determining pay, final offers may vary from the amount listed based on geography, the role’s scope and complexity, the candidate’s experience and expertise, and other factors.

Moveworks Is An Equal Opportunity Employer

*Moveworks is proud to be an equal opportunity employer. We provide employment opportunities without regard to age, race, color, ancestry, national origin, religion, disability, sex, gender identity or expression, sexual orientation, veteran status, or any other characteristics protected by law.