Technical Program Manager, Vulnerability, Configuration & Attack Surface Management

ServiceNow•West Palm Beach, FL

4d•$171,900 - $300,800

About The Position

ServiceNow’s Security Organization is hiring a Technical Program Manager for Enterprise Security to bring delivery discipline to Vulnerability Management, Configuration Management, and Attack Surface Management. The role manages the OKR and epic portfolio, keeps priorities current, and ensures committed work is represented in each engineering team’s agile backlog so delivery dates can be met. The programs span multiple teams and quarters, with dependencies, changing priorities, and ownership challenges. The Technical Program Manager tracks, communicates, and resolves cross-team dependencies, enabling engineering teams to focus on delivery and leaders to focus on strategy and people. The role also establishes scalable governance and planning standards and provides executive-level portfolio reporting. The position is based in the West Palm Beach, Florida area, with relocation available and full relocation costs provided. The job posting describes ServiceNow’s work personas as flexible, remote, or required in office; the specific assigned persona for this position is not specified. For positions in this location, the stated base pay range is $171,900 to $300,800, plus equity where applicable, variable or incentive compensation, and benefits. ServiceNow also offers health plans, flexible spending accounts, a 401(k) plan with company match, an employee stock purchase plan, matching donations, a flexible time away plan, and family leave programs.

Requirements

12 or more years of program or project management experience in software, security, or infrastructure organizations, or similar experience with education.
Track record of managing multi-team programs with competing priorities and dependencies.
Strong working knowledge of agile delivery, including backlog, epic, and sprint planning in enterprise tools such as ServiceNow Agile.
Experience managing OKRs and tying delivery to measurable outcomes.
Excellent written and verbal communication, including executive-level reporting.
Ability to influence and align teams without direct authority.
Experience leveraging or critically considering how to integrate AI into work processes, decision-making, or problem-solving; examples may include AI-powered tools, workflow automation, analyzing AI-driven insights, or exploring AI’s potential impact.

Nice To Haves

Experience in security operations, vulnerability management, configuration or compliance management, CMDB, or attack surface and exposure management.
Familiarity with regulated or government environments, such as FedRAMP and federal directives.
Experience launching a new program, including defining metrics and reporting cadence.
Experience with capacity planning and portfolio-level road mapping.
PMP, SAFe, or similar certification (nice to have, not required).

Responsibilities

Manage the OKR and epic portfolio across Vulnerability Management, Configuration Management, and Attack Surface Management, including creation, refinement, sequencing, and status tracking.
Lead ongoing reprioritization as scope and demand change, and communicate trade-offs clearly to stakeholders.
Work with team leads to keep each team's agile funnel aligned with current priorities and committed delivery dates.
Track cross-team dependencies, risks, and blockers; drive them to resolution or escalate early.
Produce executive-ready status, risk, and progress reporting for the portfolio.
Run gate reviews and go/no-go checkpoints for major milestones.
Model team capacity against competing priorities and raise conflicts early.
Build repeatable standards, including OKR governance and intake and planning templates.
Define ASM success measures and establish regular reporting to leadership.
Support a reduction in program coordination work carried by managers and engineers.