Staff Technical Program Manager (Security + IT)
Discord
- San Francisco, United States
- Lead/Staff
- 8+ years
- Posted
Skills
Required
- helping
Preferred
- SOC
- metrics
- risk reduction
- security compliance frameworks
- SOC 2
- ISO 27001
- PCI-DSS
- SOX / ICFR
Discord as a Staff Technical Program Manager (Security + IT). In this role, you will manage company-wide programs, guide cross-team projects, and accelerate the execution of the team's roadmap. You will work closely with Security Engineering, IT, Legal, Privacy, and other cross-functional engineering teams to implement solutions supporting detection & response, identity & access management, and endpoint/device management.
About Discord
Experienced with core Security programs (e.g., Vulnerability Management, Application Security Reviews, Security Incident Response) at a similarly-sized company
Responsibilities
- You will also manage multiple complex programs, develop a holistic ownership model for our code, products, and programs, and drive programs toward measurable, audit-ready outcomes.
- Develop and drive security, IT, and compliance programs across a fast-moving, high-scrutiny environment.
- Manage multiple complex programs, often with competing timelines and resource needs across security, IT, and compliance stakeholders.
- Partner with Security, IT and GRC leadership to identify, develop, and run programs that mature our control environment while keeping pace with product velocity.
- Worked with Engineering, Trust and Safety, Legal, and Privacy leadership to implement compliance requirements or meet regulatory needs, especially related to data protection or information security
Requirements
- Can break down complex challenges into workable components and make continuous progress towards solving a problem vs. trying to boil the ocean
- 8+ years of Technical Program/Product Management experience working with fast-paced Security, IT, or Infrastructure engineering teams
- If you are a productive, first-principles thinker who develops strong relationships between partners, we'd encourage you to apply!
- BA/BS in Computer Science, Engineering, or relevant technical experience
- A love for helping & empowering others
Preferred
- Experience moving technical or engineering programs from concept to completion and promoting the impact using metrics, risk reduction, and audit-readiness outcomes
- Experience working on programs related to security compliance frameworks (e.g., SOC 2, ISO 27001, NIST, PCI-DSS) at a similarly-sized company
- Comfortable operating in rooms with executive leadership, including presenting risk posture and program status to C-suite audiences
- Security or compliance certifications (e.g., CISSP, CISM, CIPP, CISA)
- Familiarity with security tooling ecosystems (SIEM, EDR, IAM platforms)
- Experience programmatically supporting a detection & response or SOC function (24x7 coverage models, threat intel, incident postmortems)
- Exposure to public-company readiness work - SOX/ICFR, segregation of duties, access reviews - or Internal Audit partnership
- Strong customer-empathy that ensures your preferred solutions take into account both user trust/Safety and company needs
Pay
USD 248,000 - 279,000
jobapplier