Principal Technical Program Manager - Security and Compliance (Chronosphere)

Palo Alto Networks•New York City, NY

8d•Remote

About The Position

Chronosphere, a Palo Alto Networks company, is the observability platform built for control in the modern, containerized world. Chronosphere empowers customers to focus on the data and insights that matter by reducing complexity, optimizing costs, and remediating issues faster. Chronosphere reduces data volumes and associated costs by 84% on average while saving developers thousands of hours. Recognized as a leader by major analyst firms, Chronosphere is trusted by the world's most innovative brands, including DoorDash, Affirm, and Zillow. This role is remote, but distance is no barrier to impact. Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters.

Requirements

Significant (12-15+ years) experience working in highly technical environments (must include software engineering, production engineering, and information security)
Experience with both on-premise and cloud-based technology services
Understanding of delivering our product via a SaaS model, including best practices
Comfortable communicating both with engineers and product (including leadership)
Hands-on experience with project management tools (e.g. JIRA, Linear)
Experience in a lightweight Agile environment working with teams using Scrum

Responsibilities

Run Compliance Programs in Engineering
Coordinate all phases of work across engineering related to security audits (SOC 2, ISO 27001)
Assist engineering in planning work around future compliance regimes (e.g. FedRamp)
Coordinate customer trust work across Engineering & Product
Work with PANW Customer Trust teams to ensure correct information is provided to customers and prospects in response to security questionnaires
Update answer banks and AI tools to reduce workload for PANW GRC teams
Navigate InfoSec Processes for Engineering
Work with engineering and product teams to capture business or technical requirements which require special handling or exceptions from InfoSec and obtain those exceptions
Collect and track security work assigned to Observability by Infosec, providing updates to Infosec teams while protecting roadmaps from disruption
Request and maintain Third Party Risk Management for all unique-to-Chronosphere risks
Build and run Integration execution plans
Work with Production Engineering to build a plan to migrate from a Managed Security Provider to internal security expertise. Drive execution of the plan.
Work with Developer Infrastructure to build a plan to migrate to an “on-prem” software development lifecycle for code hosting, continuous integration, and deployment. Drive execution of the plan.