Senior Technical Program Manager, Security

Box•Redwood City, CA

2d•$116,000 - $206,500•Hybrid

About The Position

Box is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI-first era of business. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia. By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It’s the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations. With the combination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift. We're looking for a Sr. Technical Program Manager, Security who thrives in ambiguity and knows how to turn strategic direction into measurable outcomes. In this role, you'll drive cross-functional programs that span all areas of security with the lends of partnering closely with multiple cross-functional teams across Box to deliver key capabilities from strategy through execution. You'll take on critical security initiatives, driving programs that secure our infrastructure, strengthen our environment, and deliver new security capabilities. You will bring structure to ambiguity, proactively manage milestones, dependencies, and delivery risks, and ensure programs are executed with clarity, speed, and quality. The ideal candidate thrives in collaborative environments, communicates effectively across stakeholders, and is passionate about leveraging technology to deliver meaningful customer impact.

Requirements

7+ years of experience managing and delivering large-scale security and/or engineering initiatives, including significant experience partnering with engineering, operations, product, legal, and compliance teams
Highly organized, with strong prioritization skills and a track record of managing multiple, concurrent cross-functional initiatives in a fast-paced environment.
Demonstrated ability to influence and drive accountability directly with stakeholders across multiple cross-functional areas to lead without direct authority.
Excellent written and verbal communication skills, with the ability to clearly explain security requirements to technical and non-technical stakeholders and drive consensus on risk decisions.
Strong analytical and problem-solving skills, including experience building and using metrics/dashboards to track and measure progress towards program delivery and key risk reduction.
Proficient in Jira and project management/collaboration tools (e.g., Confluence, Airtable, Slack), including using them to manage centralized intake and track cross-functional work.

Nice To Haves

Experience within a technology or software company in roles spanning AI security, infrastructure security, detection and response, or enterprise security.
Demonstrated understanding of how security functions intersect with product, engineering, and IT teams across the full lifecycle, from ideation and design through launch, operations, and incident response.
Experience applying agile methodologies to security program delivery in cross-functional environments.
Experience building and maintaining centralized knowledge bases (e.g., Confluence/Box) and developing training and enablement materials to onboard and support security programs.

Responsibilities

Partner closely with Security leadership and cross-functional stakeholders to translate strategic direction into measurable outcomes.
Ensure program initiatives align with Box's overall security strategy across focus areas including security for AI, infrastructure security, enterprise security, trust and safety, and detection and response.
Bring structure to ambiguous, complex problem spaces by creating and managing comprehensive program plans, roadmaps, timelines, and milestones for critical security initiatives.
Translate high-level strategy into actionable execution plans.
Lead end-to-end execution of complex, multi-team security initiatives, driving visibility, accountability, and timely resolution of action items across stakeholder teams, managing escalations and present updates and recommendations to leadership.
Identify workflow inefficiencies and design process improvements and automations to scale security delivery across the organization.
Maintain active, transparent communication channels (e.g., Slack, status reviews, executive updates), respond promptly to inquiries, and escalate program risks or blockers to leadership with clear recommendations and mitigation plans.
Partner with TPM leaders across Box to drive discipline, consistency, and standardized program management practices within the Security organization, raising the bar for how security programs are planned, executed, and measured.
Champion the connection between security programs and meaningful customer impact, ensuring initiatives deliver tangible value to Box customers while strengthening the company's security posture.
Lead and support additional technical security programs as needed, applying strong program management fundamentals to a broad range of security challenges.