Partner 20, Staff Security Technical Program Manager

a16z•San Francisco, CA

1d•$243,000 - $284,000•Hybrid

About The Position

Andreessen Horowitz (a16z) is seeking a Staff Security Technical Program Manager to manage the operational aspects of the a16z Security team. This role involves owning the firm's vulnerability management program, leading cross-team security initiatives, and managing the planning and execution rhythm, including sprints, OKRs, timelines, and documentation. The Security team at a16z operates at a fast pace and collaborates closely with various firm-wide teams. The TPM will ensure work stays on schedule, decisions are documented, and tasks are not missed between teams. The ideal candidate will provide accurate status updates to leadership and act as an obstacle remover for engineers, rather than an added layer of process. This role requires an in-office presence two days a week in San Francisco, CA, with occasional days in Menlo Park, CA.

Requirements

7+ years of technical program management experience, with at least 3 years running security programs
A track record of owning a vulnerability management program at scale: SLAs, remediation tracking across teams you don't control, executive reporting, and measurable risk reduction
Technical fluency to be credible with security engineers: you can read a finding, understand severity and exploitability, and push back on a risk rating with reasons.
Knows the common SaaS tools (okta, Slack,GSuite etc) of an enterprise stack well enough to talk through their security issues with the teams that own them.
Deep hands-on experience with agile execution: sprint planning, OKR frameworks, ticketing systems (Jira, Linear, or equivalent), documentation platforms like Confluence or Notion, and building program reporting in spreadsheets or BI dashboards.
Writing that is clear, brief, and structured
Ability to build strong working relationships across functions like IT, Legal, Compliance, and engineering, and execute through those partnerships: work gets done with other teams, not around them.
Low ego, high empathy, and the capacity to collaborate effectively with diverse teams

Responsibilities

Own security remediation across the firm, end to end: Pull findings from threat models, code reviews, penetration tests, vulnerability management, audits, and incident postmortems into a single tracked backlog, and manage it with clear owners, priorities, remediation SLAs
Run the vulnerability management program: Scan coverage, patching cadence, exceptions and risk acceptance, and reporting that shows leadership where risk stands
Work with stakeholders to keep vendor security reviews fast and consistent, and keep requesters informed on where their review stands
Drive cross-team security initiatives from kickoff through delivery, coordinating work across Security, IT, Legal, HR, and Compliance, and partnering with owners to keep commitments on track
Build and run the team's execution rhythm: Sprint planning, quarterly OKRs, and ticket hygiene that keeps the work visible
Raise the bar on documentation: Program docs, runbooks, decision records, and postmortem follow-ups that stay findable and current
Define and track the metrics that tell us whether our programs are working, and turn them into actionable insights