Director TPM, Strategy & Operations Security, IT & Privacy

Discord•San Francisco, CA

13d•$400,000 - $450,000

About The Position

Discord is used by over 200 million people every month for many different reasons, but there’s one thing that nearly everyone does on our platform: play video games. Over 90% of our users play games, spending a combined 1.5 billion hours playing thousands of unique titles on Discord each month. Discord plays a uniquely important role in the future of gaming. We are focused on making it easier and more fun for people to talk and hang out before, during, and after playing games. The Security & IT organization is in the middle of a significant transformation — expanding scope, standing up new functions, and hiring senior leaders across security operations, GRC, and IT. This role reports into the Office of the CTO and is the operational connective tissue for the entire organization. You'll own the operating cadences, executive reporting, budget governance, and program management practice that keep the machine running — so the Head of Security & IT can focus on strategy, risk decisions, and the external-facing mission of the organization. This role sits at the intersection of Security, IT, and adjacent domains like Privacy and GRC. You work with engineering leaders on execution, with TPMs on strategic programs, and with the Head of Security & IT on whether strategy is actually translating into outcomes. Critically, you are not just an orchestrator — you are a strategic thought partner and a hands-on builder. You should be as comfortable pressure-testing whether a strategy is achievable as you are standing up a new program from scratch.

Requirements

10+ years in technology program management or operations, with meaningful time inside security, IT, or adjacent organizations
Deep familiarity with security and IT as disciplines — you don't need to be a security engineer, but you've spent enough time in these domains to understand the risk landscape, speak the language credibly with practitioners, and know when something doesn't add up
You bring strategic judgment, not just operational rigor — you can look at a strategy, identify what's wrong or missing, and shape it before translating it into sequenced work across multiple teams
You've personally stood up programs or capabilities from scratch and handed them off — you know what it takes to go from "we don't have this yet" to "this is running and someone else can own it," and you thrive in that kind of ambiguity
You've managed TPMs or program managers and built a practice that operates as a strategic force multiplier, not a project tracking function
Experience in consumer tech, gaming, or social platforms — understanding the speed and operating model of companies like Discord
Familiarity with GRC frameworks and risk management — enough to sit with compliance and risk leadership and represent the portfolio without needing to escalate every question
A love for helping & empowering others
Candidates must reside in or be willing to relocate to the San Francisco Bay Area (Alameda, Contra Costa, Marin, Napa, San Francisco, San Mateo, Santa Clara, Solano, and Sonoma counties).

Responsibilities

Operationalize the Security & IT strategy across teams — you are the cross-cutting accountability layer that ensures roadmap items are progressing, risks are being burned down, and when the executive team asks "where are we on X?" you either know the answer or are driving closure
Pressure-test the Security & IT strategy against organizational reality — you bring a point of view on whether what we're planning is achievable, correctly prioritized, and resourced. You shape the strategy, not just execute it
Develop and drive key programs directly — when the organization needs to stand up a new capability — or when you proactively identify that one should exist (e.g., insider threat, security awareness, threat intelligence) — you define the approach, build it to a stable operating state, and transition it to the right team to own long-term
Own the operating rhythms across the entire organization — MBRs, QBRs, planning cadences, delivery tracking, executive reporting, and budget governance — giving the Head of Security & IT consistent visibility and removing operational overhead from their plate
Manage the TPM practice: directly managing Security, IT, and Privacy TPMs — developing them as strategic program leaders who can independently drive programs across their domains
Partner with compliance and risk leadership and incoming senior hires to ensure new functions plug into the operating rhythm and risk priorities are connected to planning and resource allocation
Represent the Security & IT portfolio in cross-functional and executive forums — translating complex, multi workstream status into something leadership can act on