> Markdown version of [/jobs/ext/4477487-information-security-technical-program-manger](https://www.wearedevelopers.com/jobs/ext/4477487-information-security-technical-program-manger). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Technical Program Manger

- **Company:** Clearwater Analytics
- **Location:** Boise, ID, United States
- **Experience:** Expert
- **Salary:** $102,000.0 - $144,000.0
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Confluence, JIRA, Cyber Security, Identity and Access Management, Network Security, Security Information and Event Management, Software Vulnerability Management, Cloud Platform System, Retrieval-Augmented Generation, Software Security, Firewalls (Computer Science), Information Technology, Cloudflare
- **Published:** October 6, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=42117cc0904ad44f

## About the Role

* 5+ years in technical program/project management, ideally within a security, IT infrastructure, or engineering organization.
 * Working technical fluency across multiple security domains (e.g., cloud security posture management, vulnerability management, network/firewall, SIEM/detection, IAM/PAM, application security) - broad rather than deep is the goal.
 * Demonstrated experience running structured, multi-team program tracking (RAG reporting, roadmaps, Jira/Confluence or equivalent).
 * Strong cross-functional stakeholder management skills - comfortable operating across engineering teams, IT, Legal, and executive leadership.
 * Experience coordinating technology or security integration work tied to M&A is a strong plus.
 * Excellent written and verbal communication - able to translate technical status into a clear executive narrative.

Preferred

 * PMP, PMI-ACP, or similar program/project management certification.
 * Familiarity with security tooling categories referenced above (Wiz, Tenable, CrowdStrike/Falcon, BeyondTrust, Cloudflare, Zscaler, or similar) is a plus, not a requirement.

## Description

The Information Security Technical Program Manager is the connective tissue across Clearwater's InfoSec organization - Application Security, Corporate Security/SecOps, GRC, Network Security, and Platform Security Engineering. This person doesn't own any single security domain; instead, they own the execution of cross-team and cross-department programs, keeping dozens of concurrent initiatives on track, visible, and unblocked. This is a technical generalist role: broad enough to understand what each vertical is doing and why it matters, without needing to be the deepest expert in any one area., * Own and maintain the InfoSec-wide program roadmap across all security verticals - tracking status, RAG health, ownership, and due dates for concurrent workstreams (tooling rollouts, audits, pentests, integration projects).

 * Drive cross-team technical initiatives end-to-end - e.g., security platform implementations (CNAPP, vulnerability management, EDR/PAM, network/firewall tooling) that require coordination across multiple InfoSec sub-teams and, often, IT or Engineering.
 * Lead M&A security integration coordination - ensuring newly acquired entities are brought into InfoSec's tooling, controls, and processes (firewall management, secrets/privileged access management, pentesting, audit scope) on schedule, working with Corporate Development, IT, and Legal as needed.
 * Run regular status cadences (bi-weekly syncs, roadmap reviews) and produce clear, executive-ready reporting to the CISO on program health, risks, and blockers.
 * Partner with GRC to sequence audit-driven deliverables (SOC 1, SOC 2, ISO 27001) against engineering capacity and other InfoSec priorities.
 * Maintain Jira hygiene and cross-project visibility across InfoSec's various project spaces, surfacing dependencies and conflicts before they become blockers.
 * Act as the primary point of escalation for cross-team or cross-department roadblocks, and know when/how to pull in the right technical or business stakeholder to resolve them.
 * Represent InfoSec in conversations with other departments (IT, Engineering/R&D, Legal, Corporate Development) where a security program depends on their cooperation or timeline.