Senior Security Technical Program Manager

BeyondTrust•Toronto, ON

16h

About The Position

As a Senior Security Technical Program Manager at BeyondTrust, you will use technical expertise, business acumen, and security domain knowledge to manage and streamline critical CISO Office operations and programs. You will work with CISO Office teams and business stakeholders to identify operational gaps, document requirements, visualize metrics, and execute programs that help BeyondTrust build and retain customer trust. The role oversees security initiatives across all security pillars and owns the end-to-end security issues management program, including issue intake, triage, prioritization, handoffs, remediation tracking, validation, closure, and reporting. It also leads the Cloud Governance program to convert eligible cloud-scoped remediations into enforceable Kion guardrails. The position develops project plans, metrics, reports, operational improvements, and escalation processes, and works cross-functionally to drive accountable completion of security initiatives.

Requirements

Bachelor’s degree in technology, Business Administration, Computer Science, or a related field.
5–7 years of relevant professional experience in security, project management, or technology.
Proficient understanding of security domains.
Experience communicating technical concepts to non-technical audiences and vice versa.
Experience with creative problem-solving in a fast-paced and changing environment.
Experience in security or cloud software solutions.
Ability to recognize, evaluate, and reduce program risks.
Excellent stakeholder management skills.
Demonstrated experience running a security findings, vulnerability management, or audit remediation program across multiple engineering and business teams, from intake and prioritization through verified closure.
Experience applying structured risk-scoring methods, such as CVSS or a weighted rubric, consistently and defending prioritization decisions with stakeholders.
Ability to drive accountability with owners outside the reporting line, including formal handoffs, acceptance, and escalation to senior leadership.
Hands-on experience with Jira workflows, JQL, and dashboards for program tracking and reporting.
Working knowledge of compliance frameworks and audit evidence, such as SOC 2 and ISO 27001.

Nice To Haves

Security certification, such as CISA or CISSP; program management certification, such as PMP.
Strong business acumen.
Big-picture thinking and self-starting ability.
Excellent time management and organizational skills.
Experience working for a fast-paced SaaS company.
Strong spoken and written communication skills.
Experience with cloud security posture management or policy-as-code guardrails in AWS, Azure, or GCP, such as Kion.
Experience using automation or AI to streamline finding triage, validation, or program reporting.

Responsibilities

Oversee, plan, and manage security initiatives across all security pillars.
Serve as Security TPM for the security issues management program, managing the Jira board lifecycle from identification and triage through handoff, validation, closure, and reporting.
Triage new issues using the priority rubric, confirm or adjust initial priorities, set due dates, and assign issues to accountable owners.
Manage Critical and High issues day to day, including executive notification, engagement with assignees, dependency resolution, and expedited validation.
Monitor other issues through recurring reviews and respond when escalation triggers occur.
Enforce the analysis gate before handoff, requiring documented root cause, recommended remediation, impacted systems and teams, and verifiable acceptance criteria.
Identify accountable assignees, run structured handoff meetings, and drive formal acceptance in Jira within the agreed window.
Confirm remediation plans meet acceptance criteria and surface cross-team dependencies such as budget, tooling, or other teams.
Run recurring cross-functional security issues reviews, require updated due dates and logged reasons for slippage, and decide priority and acceptance-criteria disputes or escalate them to the Sponsor.
Close issues only after independent Security validation passes and reopen failed validations with the specific gap documented.
Maintain security issues board hygiene, including identifying duplicate or overlapping tickets, consolidation opportunities, and tickets missing descriptions, due dates, or owners.
Lead the Cloud Governance program to convert eligible cloud-scoped remediations into enforceable Kion guardrails.
Create detailed project plans for initiatives and define and support metric visualization across BeyondTrust.
Propose ideas and solutions to introduce innovation and improve operational efficiency during security initiatives.
Implement metrics to measure security program success, including issue volume by priority, overdue tickets, unaccepted tickets, and due-date slippage.
Develop program progress reports, including monthly rollups and quarterly Sponsor reviews, for leadership and cross-functional stakeholders.
Collaborate with cross-functional teams and identify dependencies for program planning.
Ensure root cause analysis is completed for technical issues and security findings, and shepherd solutions through accountable owners.
Recommend adjustments to security processes based on performance metrics and influence strategic security decisions.
Participate in building and managing AI processes to improve operational efficiency.
Document processes and adjust them as necessary to ensure compliance with industry standards.
Manage project escalations and help assemble teams to address critical items, executing defined escalation triggers to the Assignee’s Manager, Trust & Assurance Leadership, or ELT Sponsor.