Technical Program Manager, Security

Global Brain Corporation

. Drive security sales enablement operations, including security questionnaires, RFP security sections, trust portal, DPA/BAA intake, and customer security reviews .

Posted 11/9/2026full-timeSan Francisco • California • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security sales enablement operations, including vendor security reviews, audit-readiness planning for SOC 2 and HIPAA, and managing cross-functional security programs. Proficient in building operational systems and templates while ensuring compliance with government and industry standards.

Highest-signal resume keywords

Security Sales Enablement OperationsAudit-Readiness PlanningCross-Functional Program ManagementOperational Systems DevelopmentIncident Management Processes

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Technical Program ManagementSecurity ComplianceVulnerability ManagementIAM Policy ReviewAudit Cycle ParticipationSecurity Questionnaire DevelopmentEvidence CollectionGap-Remediation TrackingThreat ModelingContinuous Monitoring

Soft Skills

Clear Written CommunicationCross-Functional Collaboration

Tools & Technologies

VantaDrataSecureframeVulnerability ScannersIdentity Platforms

Certifications & Qualifications

SOC 2HIPAAISO 27001FedRAMPGovRAMP

Industry Keywords

Security EngineeringGRCCloud ArchitectureKubernetesAIMLIncident CommanderDPABAAThird-Party Risk

Tech Stack

Tools & technologies

CloudKubernetes

About the role

Key responsibilities & impact

Drive security sales enablement operations, including security questionnaires, RFP security sections, trust portal, DPA/BAA intake, and customer security reviews
Build reusable answer libraries, evidence packages, and intake processes in partnership with GRC
Complete vendor security reviews for internal/corporate vendors and customer-facing product/service vendors
Streamline the vendor management process
Own audit-readiness planning for SOC 2 Type II and HIPAA, plus the roadmap for ISO 27001, NIST 800-171, and FedRAMP/GovRAMP
Manage control owners, evidence collection, gap-remediation tracking, auditor logistics, and readiness milestones
Turn vulnerability management into a continuous program with severity-based SLAs, automated routing, exception handling, and self-updating dashboards
Support GRC continuous-monitoring activities, including access provisioning/deprovisioning evidence, access reviews, BCP and incident-response testing, and configuration reviews
Drive security-heavy product launches for government, healthcare, multi-cloud, on-premises, and customer-system deployments
Ensure threat modeling, security reviews, dependencies, and sign-offs occur early, with launch blockers surfaced in advance
Drive cross-functional corporate security programs covering SaaS security posture, shadow IT, identity, insider risk, physical and office security, and security awareness/phishing
Own incident-management operating processes, escalation paths, communications templates, tabletop exercises, incident-commander support, and post-incident remediation
Run the security team’s operating cadence, including roadmap planning, program status, metrics, leadership reporting, third-party risk operations, and strategic initiatives
Maintain visibility into ownership, risks, blockers, and leadership communications for critical security programs
Report to the Head of Security as an individual contributor

Requirements

What you’ll need

5+ years in technical program or project management, including security, infrastructure, IT, or compliance programs
Experience running cross-functional programs without formal authority
Ability to read IAM policies and follow cloud or Kubernetes architecture discussions
Ability to distinguish significant CVEs from non-impactful ones
Experience running or deeply participating in a real audit cycle such as SOC 2, HIPAA, ISO 27001, FedRAMP, or equivalent
Experience supporting the security side of enterprise deals, including questionnaires and customer security reviews
Ability to build operational systems, templates, intake processes, or automation
Comfort being the first TPM in a function
Clear written communication
High-level privacy/legal documentation review experience, such as DPAs and BAAs, preferred
Hands-on FedRAMP/GovRAMP, IL4/IL5, or equivalent government-customer compliance experience, including on-prem deployments, preferred
Practitioner background in security engineering, IT, or GRC, preferred
Familiarity with Vanta, Drata, Secureframe, vulnerability scanners, and identity platforms, preferred
Experience at an AI or ML-heavy company, preferred
Incident commander or incident process owner experience, preferred
Must be legally authorized to work in the United States

Benefits

Comp & perks

Competitive compensation
Meaningful equity in a high-growth company
Executive sponsorship and cross-functional support
Opportunity to define and grow the first security TPM role
Work alongside senior engineers from Tesla, DeepMind, Databricks, and other top engineering organizations
Visible impact on enterprise and government deals
Work on an AI platform deployed in governments, hospitals, and critical industries worldwide