Information Security Technical Program Manger

The Information Security Technical Program Manager is the connective tissue across Clearwater’s InfoSec organization - Application Security, Corporate Security/SecOps, GRC, Network Security, and Platform Security Engineering. This person doesn’t own any single security domain; instead, they own the execution of cross-team and cross-department programs, keeping dozens of concurrent initiatives on track, visible, and unblocked. This is a technical generalist role: broad enough to understand what each vertical is doing and why it matters, without needing to be the deepest expert in any one area., * Own and maintain the InfoSec-wide program roadmap across all security verticals - tracking status, RAG health, ownership, and due dates for concurrent workstreams (tooling rollouts, audits, pentests, integration projects).

• Drive cross-team technical initiatives end-to-end - e.g., security platform implementations (CNAPP, vulnerability management, EDR/PAM, network/firewall tooling) that require coordination across multiple InfoSec sub-teams and, often, IT or Engineering.
• Lead M&A security integration coordination - ensuring newly acquired entities are brought into InfoSec’s tooling, controls, and processes (firewall management, secrets/privileged access management, pentesting, audit scope) on schedule, working with Corporate Development, IT, and Legal as needed.
• Run regular status cadences (bi-weekly syncs, roadmap reviews) and produce clear, executive-ready reporting to the CISO on program health, risks, and blockers.
• Partner with GRC to sequence audit-driven deliverables (SOC 1, SOC 2, ISO 27001) against engineering capacity and other InfoSec priorities.
• Maintain Jira hygiene and cross-project visibility across InfoSec’s various project spaces, surfacing dependencies and conflicts before they become blockers.
• Act as the primary point of escalation for cross-team or cross-department roadblocks, and know when/how to pull in the right technical or business stakeholder to resolve them.
• Represent InfoSec in conversations with other departments (IT, Engineering/R&D, Legal, Corporate Development) where a security program depends on their cooperation or timeline.

• 5+ years in technical program/project management, ideally within a security, IT infrastructure, or engineering organization.
• Working technical fluency across multiple security domains (e.g., cloud security posture management, vulnerability management, network/firewall, SIEM/detection, IAM/PAM, application security) - broad rather than deep is the goal.
• Demonstrated experience running structured, multi-team program tracking (RAG reporting, roadmaps, Jira/Confluence or equivalent).
• Strong cross-functional stakeholder management skills - comfortable operating across engineering teams, IT, Legal, and executive leadership.
• Experience coordinating technology or security integration work tied to M&A is a strong plus.
• Excellent written and verbal communication - able to translate technical status into a clear executive narrative.

Preferred

• PMP, PMI-ACP, or similar program/project management certification.
• Familiarity with security tooling categories referenced above (Wiz, Tenable, CrowdStrike/Falcon, BeyondTrust, Cloudflare, Zscaler, or similar) is a plus, not a requirement.