Sr. Technical Program Manager, Cybersecurity Remediation

Moderna • Cambridge, MA

2d • $145,900 - $234,200

About The Position

Moderna is seeking a Senior Technical Program Manager to lead and coordinate cybersecurity remediation initiatives across the organization. The role oversees end-to-end remediation of security findings generated through scans, assessments, audits, incident reviews, investigations, and continuous monitoring. It requires structured program management, collaboration, clear communication, and effective partnership across a complex, cross-functional environment.

The position leads multiple remediation workstreams from identification through validation and closure, and establishes a centralized operating model covering governance, prioritization, service-level agreements, escalation paths, execution tracking, metrics, risks, and trends. It also owns a consolidated findings registry and supports accountability, informed decisions, and continuous improvement.

The role partners with security, engineering, business teams, and organizational leaders to resolve blockers, influence priorities, strengthen secure engineering and operational practices, and communicate program status and technical risk in business-relevant terms. The successful candidate is also expected to contribute to an inclusive culture and support antiracist policies and processes.

Requirements

• At least 8 years of experience in Technical Program Management, Cybersecurity Program Management, or similar roles.
• Proven experience leading complex, cross-functional remediation programs in cybersecurity, infrastructure, or enterprise IT environments.
• Strong understanding of cybersecurity domains such as vulnerability management, incident response, identity, cloud security, and application security.
• Experience working with findings from audits, risk assessments, penetration tests, and security incidents.
• Strong stakeholder partnership and influencing skills in highly matrixed organizations.
• Excellent written and verbal communication skills, including executive-level communication.
• Ability to define metrics, track progress, and use data to support clear and informed decision-making.
• Strong listening skills, sound judgment, and a proactive approach to feedback and problem-solving.
• Eligibility as a U.S. person (citizen, permanent resident, asylee, or refugee) due to export-control requirements.

Nice To Haves

• Experience with GxP environments and regulatory requirements.
• Familiarity with vulnerability management platforms, GRC tools, and security tracking and reporting systems.
• Experience with post-incident review processes, including root cause analysis (RCA), CAPA management, and lessons-learned programs.
• Experience implementing or scaling enterprise remediation or risk management programs.
• Background in infrastructure, cloud, or security engineering.
• Knowledge of security frameworks such as NIST, ISO 27001, and CIS.
• Experience driving operational maturity improvements in process, tooling, or governance.
• Strong sense of ownership and urgency, with the ability to balance risk, timely execution, and business priorities.
• Influential, inclusive, and trusted partnership with a collaborative mindset.

Responsibilities

• Lead and coordinate cybersecurity remediation intake, prioritization, and execution using a structured, data-driven, risk-based approach.
• Deliver multiple concurrent remediation workstreams across technology and business teams, from identification through validation and closure.
• Establish and manage a centralized remediation operating model, including governance, prioritization frameworks, SLAs, escalation paths, and execution tracking.
• Define and monitor program metrics, risks, and trends to drive accountability, decisions, and continuous improvement.
• Translate findings from vulnerability scans, penetration tests, risk assessments, incidents, audits, and investigations into actionable remediation plans.
• Partner with teams to move remediation items through verification and closure, including managing exceptions and risk acceptance with appropriate sign-off.
• Own the consolidated findings registry as the authoritative view of vulnerabilities, risks, audit findings, post-incident action items, and assessment recommendations.
• Lead executive- and board-level reporting on remediation posture, metrics, and systemic trends, translating technical risk into business-relevant language.
• Identify recurring issues and drive longer-term improvements that strengthen cybersecurity practices and reduce future risk.
• Build relationships across security, engineering, and business teams to create alignment, navigate blockers, and influence prioritization in a highly matrixed environment.
• Provide clear, concise, executive-ready communications about program status, risks, decisions, and tradeoffs.
• Partner with leaders to strengthen secure engineering and operational practices across the organization.
• Contribute to an inclusive culture and environment at Moderna and endorse, create, and maintain antiracist policies and processes.

Benefits

• Competitive healthcare and voluntary benefit programs.
• Well-being resources, including fitness, mindfulness, and mental health support.
• Family planning benefits, including fertility, adoption, and surrogacy support.
• Paid time off, including vacation, volunteer days, sabbatical, global recharge days, and a discretionary year-end shutdown.
• Savings and investment programs.
• Location-specific perks and extras.
• Potential eligibility for an annual discretionary bonus, other incentive compensation, or an equity award, subject to plan criteria and individual performance.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed