Information Security Technical Program Manger

Clearwater Analytics•San Jose, CA

1d•$102,000 - $144,000

About The Position

The Information Security Technical Program Manager serves as the central point of coordination within Clearwater's InfoSec organization, which includes Application Security, Corporate Security/SecOps, GRC, Network Security, and Platform Security Engineering. This role focuses on the execution of cross-team and cross-departmental programs, ensuring that numerous concurrent initiatives remain on track, visible, and unhindered. The position requires a technical generalist with a broad understanding of various security domains, enabling effective comprehension of each vertical's activities and significance, without necessitating deep expertise in any single area.

Requirements

5+ years in technical program/project management, ideally within a security, IT infrastructure, or engineering organization.
Working technical fluency across multiple security domains (e.g., cloud security posture management, vulnerability management, network/firewall, SIEM/detection, IAM/PAM, application security) — broad rather than deep is the goal.
Demonstrated experience running structured, multi-team program tracking (RAG reporting, roadmaps, Jira/Confluence or equivalent).
Strong cross-functional stakeholder management skills — comfortable operating across engineering teams, IT, Legal, and executive leadership.
Excellent written and verbal communication — able to translate technical status into a clear executive narrative.

Nice To Haves

Experience coordinating technology or security integration work tied to M&A is a strong plus.
PMP, PMI-ACP, or similar program/project management certification.
Familiarity with security tooling categories referenced above (Wiz, Tenable, CrowdStrike/Falcon, BeyondTrust, Cloudflare, Zscaler, or similar) is a plus, not a requirement.

Responsibilities

Own and maintain the InfoSec-wide program roadmap across all security verticals — tracking status, RAG health, ownership, and due dates for concurrent workstreams (tooling rollouts, audits, pentests, integration projects).
Drive cross-team technical initiatives end-to-end — e.g., security platform implementations (CNAPP, vulnerability management, EDR/PAM, network/firewall tooling) that require coordination across multiple InfoSec sub-teams and, often, IT or Engineering.
Lead M&A security integration coordination — ensuring newly acquired entities are brought into InfoSec's tooling, controls, and processes (firewall management, secrets/privileged access management, pentesting, audit scope) on schedule, working with Corporate Development, IT, and Legal as needed.
Run regular status cadences (bi-weekly syncs, roadmap reviews) and produce clear, executive-ready reporting to the CISO on program health, risks, and blockers.
Partner with GRC to sequence audit-driven deliverables (SOC 1, SOC 2, ISO 27001) against engineering capacity and other InfoSec priorities.
Maintain Jira hygiene and cross-project visibility across InfoSec's various project spaces, surfacing dependencies and conflicts before they become blockers.
Act as the primary point of escalation for cross-team or cross-department roadblocks, and know when/how to pull in the right technical or business stakeholder to resolve them.
Represent InfoSec in conversations with other departments (IT, Engineering/R&D, Legal, Corporate Development) where a security program depends on their cooperation or timeline.