Technical Program Manager, Vulnerability, Configuration & Attack Surface Management

ServiceNow•Santa Clara, CA

About The Position

ServiceNow Security Organization (SSO) is hiring a Technical Program Manager within Enterprise Security to manage delivery across Vulnerability Management, Configuration Management, and Attack Surface Management. The role brings delivery discipline to these connected, multi-quarter programs by managing their OKR and epic portfolio, keeping priorities current, and ensuring committed work is represented in engineering teams’ agile backlogs so delivery dates can be met. The Technical Program Manager tracks and resolves cross-team dependencies, communicates changes and trade-offs, and helps engineers focus on technical delivery while leaders focus on strategy and people. The position also develops executive-ready reporting, runs milestone gate reviews, models team capacity, and establishes repeatable governance and planning standards. Success in the first 6 to 12 months includes creating a current OKR and epic view across the three programs, aligning each team’s agile funnel with committed dates, resolving cross-team blockers on a predictable cadence, defining and regularly reporting Attack Surface Management success measures, and reducing coordination work carried by managers and engineers. West Palm Beach, Florida, is available as a relocation location, with full relocation costs provided by ServiceNow.

Requirements

Experience leveraging or critically considering how to integrate AI into work processes, decision-making, or problem-solving.
12 or more years of program or project management experience in software, security, or infrastructure organizations, or similar experience with education.
Track record of managing multi-team programs with competing priorities and dependencies.
Strong working knowledge of agile delivery, including backlog, epic, and sprint planning in enterprise tools such as ServiceNow Agile.
Experience managing OKRs and tying delivery to measurable outcomes.
Excellent written and verbal communication, including executive-level reporting.
Ability to influence and align teams without direct authority.

Nice To Haves

Experience in security operations, vulnerability management, configuration or compliance management, CMDB, or attack surface and exposure management.
Familiarity with regulated or government environments, such as FedRAMP and federal directives.
Experience launching a new program, including defining metrics and reporting cadence.
Experience with capacity planning and portfolio-level road mapping.
PMP, SAFe, or similar certification (nice to have, not required).

Responsibilities

Manage creation, refinement, sequencing, and status tracking of the OKR and epic portfolio across Vulnerability Management, Configuration Management, and Attack Surface Management.
Lead ongoing reprioritization as scope and demand change, and clearly communicate trade-offs to stakeholders.
Work with team leads to ensure each team's agile funnel reflects current priorities and supports committed delivery dates.
Track cross-team dependencies, risks, and blockers, and drive them to resolution or escalate them early.
Produce executive-ready status, risk, and progress reporting for the portfolio.
Run gate reviews and go/no-go checkpoints for major milestones.
Model team capacity against competing priorities and raise conflicts early.
Build repeatable standards, including OKR governance and intake and planning templates, that scale across teams.