> Markdown version of [/jobs/ext/4634077-sr-technical-program-manager-cybersecurity-remediation](https://www.wearedevelopers.com/jobs/ext/4634077-sr-technical-program-manager-cybersecurity-remediation). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr. Technical Program Manager, Cybersecurity Remediation

- **Company:** ModernaTX, Inc.
- **Location:** Cambridge, MA, United States (Remote available)
- **Experience:** Expert
- **Salary:** $145,900 - $234,200
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Cloud Computing Security, Cyber Security, Smartsuite, Software Vulnerability Management, Software Security, Data Analytics, GXP, Vulnerability Analysis
- **Published:** November 8, 2026
- **Apply:** https://www.disabledperson.com/jobs/76410250-sr-technical-program-manager-cybersecurity-remediation

## About the Role

* Experience: 8+ years in Technical Program Management, Cybersecurity Program Management, or similar roles.
 * Proven experience leading complex, cross-functional remediation programs in cybersecurity, infrastructure, or enterprise IT environments.
 * Strong understanding of cybersecurity domains such as vulnerability management, incident response, identity, cloud security, and application security.
 * Experience working with findings from audits, risk assessments, penetration tests, and security incidents.
 * Strong stakeholder partnership and influencing skills in highly matrixed organizations.
 * Excellent written and verbal communication skills, including executive-level communication.
 * Ability to define metrics, track progress, and use data to support clear and informed decision-making.
 * Strong listening skills, sound judgment, and a proactive approach to feedback and problem-solving.

Here's What You'll Bring to the Table (Preferred Qualifications)

 * Experience with GxP environments and regulatory requirements.
 * Familiarity with vulnerability management platforms, GRC tools, and security tracking/reporting systems.
 * Experience with post-incident review processes, including root cause analysis (RCA), CAPA management, and lessons-learned programs.
 * Experience implementing or scaling enterprise remediation or risk management programs.
 * Background in infrastructure, cloud, or security engineering.
 * Knowledge of security frameworks (e.g., NIST, ISO 27001, CIS).
 * Experience driving operational maturity improvements (process, tooling, governance).
 * Strong sense of ownership and urgency, with the ability to balance risk, timely execution, and business priorities.
 * Influential, inclusive, and trusted partner with a collaborative mindset.

## Description

Moderna is seeking a Senior Technical Program Manager (TPM) to lead and coordinate cybersecurity remediation initiatives across the organization. We're looking for someone who brings integrity, sound judgment, strong relationship-building skills, and cybersecurity expertise, and who can partner effectively across teams to move complex work forward.

In this role, you will help lead the end-to-end remediation of security findings generated through scans, assessments, audits, incident reviews, investigations, and continuous monitoring. You will bring thoughtful program management, collaboration, and clear communication to a complex, cross-functional environment where responsiveness, quality, and partnership all matter.

Here's What You'll Be Doing:

Program Ownership

 * Lead and coordinate the intake, prioritization, and execution of cybersecurity remediation programs using a structured, data-driven, and risk-based approach.
 * Responsible for end-to-end delivery of multiple concurrent remediation workstreams across Moderna technology and business teams, from identification through validation and closure.
 * Establish and manage a centralized remediation operating model, including governance, prioritization frameworks, SLAs, escalation paths, and execution tracking.
 * Define and monitor program metrics, risks, and trends to drive accountability, decisions, and continuous improvement.

Risk and Remediation Management

 * Translate findings from vulnerability scans, penetration tests, risk assessments, incidents, audits, and investigations into actionable remediation plans.
 * Partner with teams to move remediation items through verification and closure, including management of exceptions and risk acceptance with appropriate sign-off.
 * Own the consolidated findings registry, maintaining a single authoritative view of vulnerabilities, risks, audit findings, post-incident action items, and assessment recommendations.
 * Lead executive- and board-level reporting on remediation posture, metrics, and systemic trends, translating technical risk into business-relevant language.
 * Identify recurring issues and drive longer-term improvements that strengthen cybersecurity practices and reduce future risk.

Partner Engagement and Influence

 * Build strong relationships across security, engineering, and business teams to create alignment, navigate blockers, and influence prioritization in a highly matrixed environment.
 * Provide clear, concise, and executive-ready communications on program status, risks, decisions, and tradeoffs.
 * Partner with leaders to strengthen secure engineering and operational practices across the organization.
 * Actively contribute to creating a more inclusive culture and environment at Moderna; endorse, create, and maintain antiracist policies and processes.