Security Technical Program Manager

Flywire • Boston, MA

9d • $98,257 - $140,367

About The Position

The Security Technical Program Manager serves as the strategic operational bridge between Security Risk Engineering and global Product, Engineering, and SRE teams. The role leads mission-critical security programs from inception through deployment, turning security, compliance, and risk initiatives into actionable roadmaps. It combines technical program management, financial-services knowledge, and understanding of modern cloud architectures and AI ecosystems to help Flywire move quickly while maintaining security by design.

The position covers security lifecycle programs, AI-driven process improvements, vulnerability and threat coordination, technical audits, roadmap governance, cross-functional enablement, and mentorship. The role partners with globally distributed teams to integrate security guardrails into development workflows and maintain readiness for applicable financial and data-protection requirements.

Requirements

• Bachelor's or master's degree in Cybersecurity, Information Technology, Computer Science, or a related technical field.
• At least 2 years of progressive Technical Program Management experience driving complex Information Security, Application Security, or Cyber Risk initiatives in highly scalable technology environments.
• Extensive experience in Financial Services and the global Payments Industry.
• Deep understanding of financial platform mechanics, transaction processing lifecycles, and payment clearing rails.
• Proven ability to manage, execute, and deliver complex end-to-end audits for financial and data-privacy frameworks, with proficiency in PCI-DSS v4.0, SOX, SOC 1, and SOC 2.
• Foundational understanding of modern cloud architectures, including AWS, GCP, or Azure; automated Secure-SDLC engineering pipelines; the OWASP Top 10 for LLMs; and automated enterprise vulnerability management systems.
• Ability to translate financial compliance requirements and technical vulnerabilities into actionable engineering remediation plans.
• Ability to replace manual program-management checkpoints with intelligent automation, workflows, and enterprise AI tools.
• Ability to influence and align software engineers, product managers, and external financial regulators across globally distributed time zones.
• Resilience and analytical clarity in high-pressure situations, including active security incidents and compressed financial product launch windows.
• Hands-on technical skills and strategic judgment to translate program vision into actionable plans while balancing risk reduction with business enablement.

Nice To Haves

• Working knowledge of emerging international standards such as DORA.
• CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or CCSK (Certificate of Cloud Security Knowledge).
• CISA (Certified Information Systems Auditor).
• PMP (Project Management Professional) or certification as an Agile/Scrum Master.

Responsibilities

• Lead cross-functional Security by Design and Secure-SDLC initiatives for application launches, automated workflows, and emerging AI tools from ideation through deployment.
• Use internal enterprise AI tools and large language models to automate program tracking, streamline documentation, improve security workflows, and increase operational efficiency.
• Coordinate the end-to-end vulnerability lifecycle with Product, SRE, and Software Engineering teams, including risk prioritization, tracking, and remediation.
• Oversee technical security assessments and audits to maintain readiness for PCI-DSS, SOX, SOC 1, and SOC 2.
• Establish, maintain, and communicate the security engineering program roadmap, including project charters, timelines, success metrics, and technical definitions of done for executive stakeholders.
• Partner with software engineering and infrastructure teams to integrate security guardrails without creating unnecessary friction for development velocity.
• Guide and coach junior members of the security and program teams, promoting technical excellence and collaborative risk awareness.

Benefits

• Competitive compensation.
• Employee Stock Purchase Plan (ESPP).
• Competitive time off.
• Wellbeing programs, including mental health, wellness, and yoga, Pilates, and HIIT classes.
• Talent and development programs, including Managers Taking Flight and OneFlywire Career Mobility.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level