Partner 20, Staff Security Technical Program Manager

a16z•San Francisco, CA

59d•$265,000 - $344,000•Hybrid

About The Position

Andreessen Horowitz (a16z) is hiring a Staff Security Technical Program Manager to run the operating system of its Security team. The role owns the firm's vulnerability management program, drives cross-team security initiatives to completion, and maintains the planning rhythm that aligns the team and its stakeholders, including sprints, OKRs, timelines, documentation, and ticketing practices. Security work moves quickly and touches every part of the firm. The position partners with teams across the firm to keep work on schedule, ensure decisions are documented, and prevent tasks from being dropped between teams. Leadership should receive accurate status updates, while engineers should experience the role as removing obstacles rather than adding unnecessary process. The role requires working in the San Francisco, California office two days per week, Tuesday and Thursday, with occasional days in the Menlo Park, California office.

Requirements

At least 7 years of technical program management experience, including at least 3 years running security programs.
Track record of owning a vulnerability management program at scale, including SLAs, remediation tracking across teams outside one's control, executive reporting, and measurable risk reduction.
Technical fluency to understand security findings, severity, and exploitability, and to challenge risk ratings with reasoned arguments.
Familiarity with common enterprise SaaS tools, including Okta, Slack, and GSuite, and the ability to discuss their security issues with the teams that own them.
Deep hands-on experience with agile execution, including sprint planning, OKR frameworks, ticketing systems such as Jira or Linear, documentation platforms such as Confluence or Notion, and program reporting in spreadsheets or BI dashboards.
Clear, brief, and structured writing.
Ability to build strong cross-functional working relationships with IT, Legal, Compliance, and engineering, and execute through those partnerships.
Low ego, high empathy, and ability to collaborate effectively with diverse teams.

Responsibilities

Own security remediation across the firm by consolidating findings from threat models, code reviews, penetration tests, vulnerability management, audits, and incident postmortems into a tracked backlog with clear owners, priorities, and remediation SLAs.
Run the vulnerability management program, including scan coverage, patching cadence, exceptions, risk acceptance, and leadership reporting on risk.
Work with stakeholders to keep vendor security reviews fast and consistent, and keep requesters informed about review status.
Drive cross-team security initiatives from kickoff through delivery, coordinating Security, IT, Legal, HR, and Compliance, and partnering with initiative owners to keep commitments on track.
Build and run the team's execution rhythm, including sprint planning, quarterly OKRs, and ticket hygiene.
Maintain findable and current program documentation, runbooks, decision records, and postmortem follow-ups.
Define and track program-effectiveness metrics and turn them into actionable insights.