Senior Technical Program Manager (Security)

About the role

We are seeking a Senior Technical Program Manager to join a growing Security team, with focus on program delivery, driving portfolio management and operating model practices for Backblaze.

Responsibilities

• Lead end-to-end planning and execution of enterprise security programs (e.g., vulnerability management, incident response readiness, identity and access management, data protection, cloud security) from initiation through delivery
• Communicate technical security concepts and program status clearly to both technical teams and non-technical stakeholders
• Develop and maintain detailed program plans, timelines, budgets, and resource allocation across multiple concurrent security initiatives
• Identify, track, and mitigate program risks and dependencies, escalating blockers to leadership with clear options and recommendations
• Drive cross-functional coordination between engineering, product, legal, and third-party vendors to ensure security controls are implemented on schedule
• Establish and report on program goals, dashboards, and status updates for executive and board-level audiences
• Manage the intake, prioritization, and tracking of security findings, vulnerabilities, and remediation efforts across teams
• Support incident response coordination, including post-incident reviews and follow-up action tracking
• Continuously improve program management processes, tooling, and governance frameworks specific to security operations
• Foster a culture of transparency and trust, apply lean value-driven approach, manage by influence, support and empower technical teams through servant leadership
• In partnership with other TPMs, participate in implementation of continuous cross-functional process improvement initiatives

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field (or equivalent practical experience); Master's degree a plus
• 8+ years of technical program management experience, including 3+ years managing security-focused programs
• Strong understanding of security domains: vulnerability management, threat modeling, identity and access management, network security, cloud security, and incident response
• Familiarity with regulatory and compliance frameworks such as SOC 2, ISO 27001, NIST CSF, GDPR, HIPAA, or FedRAMP
• Relevant security certifications, such as: CISSP, CISM, PMP or PgMP, CRISC, CCSP, Cloud security certifications (e.g., AWS Certified Security