> Markdown version of [/jobs/ext/2852289-technical-program-manager-tpm](https://www.wearedevelopers.com/jobs/ext/2852289-technical-program-manager-tpm). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Technical Program Manager (TPM) - **Company:** CoreAi Consulting - **Location:** United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Cloud Engineering, DevOps, Identity and Access Management, Network Segmentation, PCI Data Security Standards, Systems Development Life Cycle, Role-Based Access Control, Smartsuite, Data Logging, Cloud Platform System - **Published:** September 11, 2026 - **Apply:** https://www.thejobnetwork.com/job/dcf94907-7333-461b-be82-a7be0312c3e2/technical-project-manager-pci-compliance ## About the Role * 10+ years of experience in Technical Program/Project Management in security or compliance domains * Proven experience leading PCI DSS certification programs end-to-end (not just support) * Strong understanding of CDE scoping, control implementation, and audit processes * Experience implementing security guardrails across cloud environments (AWS/GCP/Azure) * Hands-on experience with IAM, RBAC, privileged access controls, encryption, and monitoring frameworks * Experience with automated compliance, GRC tools, and audit workflows * Strong ability to work across engineering, security, infrastructure, and executive stakeholders * Experience building risk dashboards, telemetry, and executive reporting * Familiarity with secure SDLC and cloud-native architectures Nice to Have * Experience in financial services or highly regulated environments * Experience scaling compliance across multiple business units or platforms * Certifications such as PMP, CISSP, CISA, or PCI-related credentials ## Description We are seeking a seasoned Technical Program Manager (TPM) specializing in PCI DSS compliance to lead enterprise-wide certification and compliance programs across cloud and application platforms. This role will drive end-to-end PCI readiness, control implementation, and audit execution, while embedding security and compliance into engineering and infrastructure at scale., * Lead end-to-end PCI DSS certification programs, including CDE scoping, control implementation, audit readiness, and certification * Drive implementation of PCI-aligned security guardrails across cloud and application environments (IAM, encryption, network segmentation, logging, monitoring) * Partner with engineering, security, DevOps, legal, and audit teams to operationalize PCI controls across systems * Establish and manage automated control validation, evidence collection, and continuous compliance monitoring * Track and drive remediation of vulnerabilities, audit findings, and compliance gaps to closure * Embed security-by-design principles into architecture and SDLC processes * Build executive-level reporting and dashboards for PCI readiness, risk posture, and program progress * Coordinate and lead internal and external PCI audits, including auditor engagement and response management * Define and manage risk tracking, mitigation strategies, and remediation timelines across programs * Enable scalable, repeatable compliance frameworks across multiple applications and business units ## Related Videos - [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [30 powerful AWS hacks in just 30 minutes: Boost your developer productivity](https://www.wearedevelopers.com/videos/1624-30-powerful-aws-hacks-in-just-30-minutes-boost-your-developer-productivity) - [Build Delightful Mobile Experiences with Kotlin, Realm, and Atlas Device Sync](https://www.wearedevelopers.com/videos/694-build-delightful-mobile-experiences-with-kotlin-realm-and-atlas-device-sync) - [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)