Sr. Technical Program Manager (Security)

Overview

Backblaze is seeking a Senior Technical Program Manager to join a growing Security team, focused on program delivery, portfolio management and operating model practices.

What you'll do

• Lead end-to-end planning and execution of enterprise security programs (e.g., vulnerability management, incident response readiness, identity and access management, data protection, cloud security) from initiation through delivery
• Communicate technical security concepts and program status clearly to both technical teams and non-technical stakeholders
• Develop and maintain detailed program plans, timelines, budgets, and resource allocation across multiple concurrent security initiatives
• Identify, track, and mitigate program risks and dependencies, escalating blockers to leadership with clear options and recommendations
• Drive cross-functional coordination between engineering, product, legal, and third-party vendors to ensure security controls are implemented on schedule
• Establish and report on program goals, dashboards, and status updates for executive and board-level audiences
• Manage the intake, prioritization, and tracking of security findings, vulnerabilities, and remediation efforts across teams
• Support incident response coordination, including post-incident reviews and follow-up action tracking
• Continuously improve program management processes, tooling, and governance frameworks specific to security operations
• Foster a culture of transparency and trust, apply lean value-driven approach, manage by influence, support and empower technical teams through servant leadership
• In partnership with other TPMs, participate in implementation of continuous cross-functional process improvement initiatives

What you'll need

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field (or equivalent practical experience)
• 8+ years of technical program management experience, including 3+ years managing security-focused programs
• Strong understanding of security domains: vulnerability management, threat modeling, identity and access management, network security, cloud security, and incident response
• Familiarity with regulatory and compliance frameworks such as SOC 2, ISO 27001, NIST CSF, GDPR, HIPAA, or FedRAMP
• Ability to adapt agile management principles to a variety of development environments
• Proven ability to manage multiple complex, cross-functional programs simultaneously in a fast-paced environment
• Excellent written and verbal communication skills, with the ability to translate technical risk into business impact for executive audiences
• Strong analytical and risk-assessment skills, with experience using program management and ticketing tools
• Demonstrated ability to build trust and influence without direct authority across engineering, legal, and executive teams
• High attention to detail, sound judgment under pressure, and comfort operating with ambiguity during active incidents

Nice to have

• Master's degree
• Relevant security certifications, such as CISSP, CISM, PMP or PgMP, CRISC, CCSP, or cloud security certifications (e.g., AWS Certified Security – Specialty, Microsoft Certified: Security Operations Analyst Associate)
• Experience with Atlassian and Google product suites

Details

• Remote, US
• Expected base salary range: $130,000 - $150,000
• Final offer amounts may vary based on candidate location, skills, depth of work experience, and relevant licenses/credentials