Security Technical Program Manager

Asana•San Francisco, CA

3h•$194,000 - $220,000•Hybrid

About The Position

At Asana, security is foundational to our mission of helping teams work together effortlessly. Our Security organization protects Asana’s employees, users, and customers by proactively addressing threats, enabling secure product development, and embedding security into the fabric of how we operate. We partner closely with Engineering, Product, IT, Legal, and Compliance to build and maintain trust at scale. As a Security Technical Program Manager, you'll be the connective tissue across the entire Security organization, driving the strategy, programs, and operational rhythms that make the team highly effective and externally visible. This is a high-impact, high-autonomy role. You'll define how Security as a function operates: how it plans, how it measures itself, how it communicates progress, and how it executes on its biggest bets. You won't just run programs, you'll shape the operating model that makes all programs run better.

Requirements

8+ years of TPM experience, with meaningful time in a security context (security engineering, GRC, product security, infra security, or similar)
Strong understanding of security with the ability to engage technical teams and communicate clearly to executive stakeholders
Demonstrated ability to lead large-scale, cross-functional programs from ambiguous inception through delivery
Exceptional written and verbal communication, with proven ability to influence without authority at all levels
Track record of operating with high autonomy — you create the structure rather than waiting for it

Responsibilities

Lead high-impact, cross-functional special projects that span organizational boundaries, from standing up new security capabilities and maturity programs to company-wide strategic initiatives
Own the Security organization's annual and quarterly planning cycles, translating multi-year security strategy into a prioritized, executable roadmap
Drive the prioritization and communication of security asks across stakeholders, building a unified framework that influences how partner teams plan and prioritize security work
Define and own the Security team's KPI framework, covering risk posture, program health, and strategic goal progress
Build dashboards and reporting cadences that give leadership real-time visibility into what's working, what's at risk, and where decisions are needed
Establish and continuously improve the operating cadences (All Hands meetings, program reviews, OKR check-ins) that keep the organization aligned and moving fast
Act as a thought partner to security leadership on org design, process improvement, and operational scale