Information Security Technical Program Manger

Clearwater Analytics•San Jose, CA

About The Position

The Information Security Technical Program Manager serves as the central point of coordination within Clearwater's InfoSec organization, which includes Application Security, Corporate Security/SecOps, GRC, Network Security, and Platform Security Engineering. This role focuses on the execution of cross-team and cross-departmental programs, ensuring that numerous concurrent initiatives remain on track, visible, and unhindered. The position requires a technical generalist with a broad understanding of various security domains, capable of grasping the significance of each area without needing to be the foremost expert in any single one.

Requirements

5+ years in technical program/project management, ideally within a security, IT infrastructure, or engineering organization.
Working technical fluency across multiple security domains (e.g., cloud security posture management, vulnerability management, network/firewall, SIEM/detection, IAM/PAM, application security) — broad rather than deep is the goal.
Demonstrated experience running structured, multi-team program tracking (RAG reporting, roadmaps, Jira/Confluence or equivalent).
Strong cross-functional stakeholder management skills — comfortable operating across engineering teams, IT, Legal, and executive leadership.
Excellent written and verbal communication — able to translate technical status into a clear executive narrative.

Nice To Haves

Experience coordinating technology or security integration work tied to M&A is a strong plus.
PMP, PMI-ACP, or similar program/project management certification.
Familiarity with security tooling categories referenced above (Wiz, Tenable, CrowdStrike/Falcon, BeyondTrust, Cloudflare, Zscaler, or similar) is a plus, not a requirement.

Responsibilities

Own and maintain the InfoSec-wide program roadmap across all security verticals, tracking status, RAG health, ownership, and due dates for concurrent workstreams (tooling rollouts, audits, pentests, integration projects).
Drive cross-team technical initiatives end-to-end, such as security platform implementations (CNAPP, vulnerability management, EDR/PAM, network/firewall tooling) that require coordination across multiple InfoSec sub-teams and often IT or Engineering.
Lead M&A security integration coordination, ensuring newly acquired entities are integrated into InfoSec's tooling, controls, and processes (firewall management, secrets/privileged access management, pentesting, audit scope) on schedule, working with Corporate Development, IT, and Legal as needed.
Run regular status cadences (bi-weekly syncs, roadmap reviews) and produce clear, executive-ready reporting to the CISO on program health, risks, and blockers.
Partner with GRC to sequence audit-driven deliverables (SOC 1, SOC 2, ISO 27001) against engineering capacity and other InfoSec priorities.
Maintain Jira hygiene and cross-project visibility across InfoSec's various project spaces, surfacing dependencies and conflicts before they become blockers.
Act as the primary point of escalation for cross-team or cross-department roadblocks, and know when/how to pull in the right technical or business stakeholder to resolve them.
Represent InfoSec in conversations with other departments (IT, Engineering/R&D, Legal, Corporate Development) where a security program depends on their cooperation or timeline.