Technical Program Manager, Product Cybersecurity & Regulatory Compliance

Lam Research•Fremont, CA

7d•$104,000 - $231,000

About The Position

As a Technical Program Manager, Product Cybersecurity & Regulatory Compliance at Lam, you will lead cross-functional product cybersecurity and Software & Controls programs from initiation through delivery. You will translate cybersecurity, software, and regulatory requirements into executable product-development plans and connect subject matter expertise with engineering execution. Your work will strengthen program governance, requirements traceability, product readiness, and risk management across Lam's product portfolio. The role is within the Global Products Group’s Product Regulatory Compliance organization, which supports implementation and control of regulatory, product safety, cybersecurity, restricted-materials, and sustainability requirements across Lam’s product portfolio throughout the product lifecycle. The position works across engineering and supporting functions to incorporate cybersecurity and software requirements into product development, release, and evidence-management processes.

Requirements

Bachelor's degree in engineering, computer science, cybersecurity, or a related technical discipline with 8+ years of experience; master's degree with 6+ years; or equivalent experience.
6+ years of technical program management, engineering program management, or continuous improvement experience.
Experience leading complex, cross-functional technical programs involving software, cybersecurity, embedded systems, or controls engineering.
Working knowledge of software development lifecycles, engineering release processes, requirements management, and verification practices.
Demonstrated ability to translate technical requirements into executable program plans and drive teams toward measurable milestones.
Strong executive communication, stakeholder influence, risk management, problem-solving, and organizational skills.

Nice To Haves

Experience in product cybersecurity, application security, secure software development, DevSecOps, or industrial control systems.
Familiarity with IEC 62443, NIST Cybersecurity Framework, NIST Secure Software Development Framework, ISO/IEC 27001, or related cybersecurity frameworks.
Experience supporting product cybersecurity regulations, such as the EU Cyber Resilience Act, or customer cybersecurity requirements.
Familiarity with vulnerability management, software bills of materials (SBOMs), software supply-chain security, vulnerability disclosure, and remediation processes.
Semiconductor equipment, industrial automation, embedded systems, or complex capital equipment experience.
Experience with PDR, eDMS, requirements management, dashboards, and analytics tools such as Power BI.
PMP, Agile/Scrum, Lean Six Sigma, cybersecurity, or related professional certification.
Experience leveraging automation or AI to improve program execution, traceability, reporting, or process efficiency.

Responsibilities

Lead end-to-end execution of complex product cybersecurity and Software & Controls programs across multiple products and engineering organizations.
Translate cybersecurity, regulatory, customer, and software lifecycle requirements into actionable workstreams, milestones, owners, dependencies, and deliverables.
Partner with Software & Controls Engineering, Cybersecurity, Systems Engineering, Product Safety, Product Regulatory Compliance, IT/Security, Legal, Quality, and product groups.
Integrate product cybersecurity and software requirements into Product Development & Release (PDR), engineering change, release-readiness, and evidence-management workflows.
Coordinate secure development lifecycle, cybersecurity architecture, vulnerability management, remediation, software supply-chain, and product-release activities.
Establish program governance, operating cadence, dashboards, risk registers, decision logs, and executive reporting.
Drive requirements and evidence traceability from requirement definition through implementation, verification, and product release.
Identify cross-product risks, dependencies, and systemic gaps; drive mitigation, escalation, and scalable process improvements.
Support emerging product cybersecurity regulations, industry standards, and customer security requirements, including EU Cyber Resilience Act readiness and awareness of related product regulatory requirements such as RED cybersecurity and FCC for wireless-enabled products.
Lead change management and continuous improvement to ensure sustained adoption of cybersecurity and software-development controls.