Senior Security Technical Program Manager

Flywire • Boston, MA

9d • $122,662 - $175,232

About The Position

The Senior Security Technical Program Manager drives the planning, execution, and delivery of security initiatives and programs across the organization, collaborating with cross-functional teams to protect applications. The role establishes stakeholder relationships and communicates and advances the security roadmap. It calls for a strong technical security background, experience with security by design and Secure-SDLC, project management expertise, and effective communication and coordination across stakeholder groups.

The position serves as an application security subject matter expert and leads programs to protect software assets and mitigate risks. It works closely with product, engineering, software development, SRE, program management, and QA teams to define scope and priorities, integrate security practices throughout the SDLC, coordinate vulnerability remediation, and report on security compliance, metrics, and progress. The role also oversees security assessments, audits, compliance, threat and vulnerability management, secret management, and third-party security programs; improves processes through automation and technology; and helps ensure compliance with applicable laws, regulations, and industry standards, including GDPR, HIPAA, and PCI DSS.

The Senior Security Technical Program Manager represents user interests in security design, gathers feedback, manages external security relationships, tracks industry trends and threats, and mentors junior application security team members. Travel may be required. The posted base salary range is $122,662–$175,232 across US locations, with individual pay determined by work location and other job-related factors.

Requirements

• Bachelor’s or Master’s degree in Cybersecurity, Information Technology, or a related field.
• At least 6 years of experience in technical program management, ideally focused on security.
• Ability to communicate effectively with engineers and executives.
• Proficiency in managing and advancing multiple projects simultaneously.
• Ability to collaborate with teams across time zones and functions, with readiness to travel as needed.
• Ability to influence and motivate people across different roles and functions.
• Ability to work independently.
• Good analytical and problem-solving skills.
• Ability to make well-informed decisions under pressure while considering effects on team goals.
• Ability to maintain focus in high-pressure situations and demonstrate resilience.
• Ability to explain complex technical concepts clearly and concisely to technical and non-technical colleagues.

Responsibilities

• Drive the planning, execution, and delivery of security initiatives and programs across the organization.
• Establish stakeholder relationships and communicate and advance the security roadmap.
• Serve as a subject matter expert on application security, providing guidance and support to technical and non-technical stakeholders.
• Lead the development and implementation of application security programs and initiatives to protect software assets and mitigate risks.
• Work with product and engineering teams to confirm program scope, priorities, and Definition of Done and achieve defined business outcomes.
• Collaborate with software development, SRE, program management, and QA teams to integrate security best practices throughout the SDLC.
• Coordinate resolution of vulnerabilities identified by the application security team and support timely remediation by engineering teams.
• Define and report on development lifecycle security compliance, success metrics, and progress.
• Oversee security assessments, audits, and compliance activities to identify vulnerabilities and ensure adherence to standards, regulations, and industry best practices.
• Coordinate threat and vulnerability management, secret management, and the third-party security program.
• Continuously improve security processes and procedures, using automation and technology where applicable.
• Represent users’ interests in security designs, gather feedback, identify security hurdles, and incorporate findings into strategic planning.
• Manage relationships with external security vendors, consultants, and other stakeholders, and stay informed about industry trends and emerging threats.
• Lead efforts to ensure compliance with relevant laws, regulations, and standards, including GDPR, HIPAA, and PCI DSS.
• Mentor and coach junior application security team members and foster learning and professional development.

Benefits

• Competitive compensation
• Employee Stock Purchase Plan (ESPP)
• Competitive time off
• Wellbeing programs, including mental health, wellness, and Yoga/Pilates/HIIT classes
• Talent and development programs, including Managers Taking Flight and OneFlywire Career Mobility

What This Job Offers

• Job Type: Full-time
• Career Level: Senior