Technical Program Manager, Vulnerability, Configuration & Attack Surface Management

ServiceNow•Santa Clara, CA

4d•$190,900 - $334,100

About The Position

ServiceNow’s Security Organization delivers security solutions intended to reduce risk and protect the company and its customers. Enterprise Security is hiring a Technical Program Manager to provide delivery discipline across Vulnerability Management, Configuration Management, and Attack Surface Management programs. The role manages the OKR and epic portfolio, keeps priorities current, and ensures committed work is represented in engineering teams’ agile backlogs so delivery dates remain achievable. The programs span multiple teams and quarters, with dependencies, changing priorities, and ownership challenges. The Technical Program Manager tracks, communicates, and resolves cross-team dependencies, enabling engineers to focus on technical delivery and leaders to focus on strategy and people. The role also establishes repeatable governance and planning standards and provides portfolio-level visibility to stakeholders and executives. The position is based in the West Palm Beach, Florida area, which is available for relocation; ServiceNow provides full relocation costs. The work persona is listed as flexible or remote. The base pay range for positions in this location is $190,900–$334,100, plus equity when applicable, variable or incentive compensation, and benefits. Compensation may vary based on qualifications, skills, competencies, and work location.

Requirements

12 or more years of program or project management experience in software, security, or infrastructure organizations, or similar experience with education.
Track record of managing multi-team programs with competing priorities and dependencies.
Strong working knowledge of agile delivery, including backlog, epic, and sprint planning in enterprise tools such as ServiceNow Agile.
Experience managing OKRs and tying delivery to measurable outcomes.
Excellent written and verbal communication skills, including executive-level reporting.
Ability to influence and align teams without direct authority.
Experience leveraging or critically considering how to integrate AI into work processes, decision-making, or problem-solving.

Nice To Haves

Experience in security operations, vulnerability management, configuration or compliance management, CMDB, or attack surface and exposure management.
Familiarity with regulated or government environments, such as FedRAMP and federal directives.
Experience launching a new program, including defining metrics and reporting cadence.
Experience with capacity planning and portfolio-level road mapping.
PMP, SAFe, or similar certification; nice to have but not required.

Responsibilities

Manage creation, refinement, sequencing, and status tracking for the OKR and epic portfolio across Vulnerability Management, Configuration Management, and Attack Surface Management.
Lead ongoing reprioritization as scope and demand change, and clearly communicate trade-offs to stakeholders.
Work with team leads to ensure each team's agile funnel reflects current priorities and supports committed delivery dates.
Track cross-team dependencies, risks, and blockers, drive them to resolution, and escalate early when needed.
Produce executive-ready portfolio status, risk, and progress reporting.
Run gate reviews and go/no-go checkpoints for major milestones.
Model team capacity against competing priorities and raise conflicts early.
Build repeatable standards, including OKR governance and intake and planning templates, that scale across teams.
Define ASM success measures and establish regular reporting to leadership.