Senior Technical Program Manager, Security Risk and M&A Security

About the role

This role is a hands-on building role as much as an operating one. You will mature both capabilities from pilot into embedded, business-as-usual process, and build the operating cadence and visibility that make them stick.

Responsibilities

• Mature AI-assisted security exception management from pilot to embedded business process — our Assurance Engineering team builds the workflow; you own the program around it (requirements, rollout, adoption, intake, triage, service-level agreements, and the escalation path for past-due items), and you design the intake experience to meet engineers where they already work so the fast path is also the right path
• Take KRI dashboards from pilot to a tool leadership relies on — partner with Assurance Engineering, who build it; you define, in partnership with domain leads, what leadership needs to see and how it gets used, and you own adoption and accuracy
• Run the Security Risk Management operating cadence — drive periodic risk reviews with the CISO and security leadership, run the annual enterprise security risk assessment, and apply our security risk assessment framework to new risk intakes so risks are consistently identified, assessed, and routed to owners
• Own program reporting and visibility for Security Risk Management: operating cadence, dashboards, and executive updates
• Keep the M&A security integration program running in steady state — maintain integration tracking across active acquisitions, support new acquisitions through the established M&A security integration playbook, and identify and execute improvements to the playbook where you find gaps
• Drive stalled work to a decision — when a timeline slips, escalate or push a risk-acceptance call so the blocker resolves
• Partner across teams to land cross-functional dependencies

Requirements

You will need 5+ years in security or risk program operations, technical program management, consulting, or a comparable role, with a track record of owning programs end to end and driving them to a closed state.

Qualifications

You will need genuine security risk management fluency — you understand how security risk gets identified, assessed, owned, and accepted, and you can hold your own with security domain experts; command of the discipline matters here more than any specific job title; experience managing program or delivery risk alone (scope, schedule, dependencies) is not enough for this role.

Skills

You will need a builder's mindset, required for this role — you build capabilities and operational process where little exists, going deep into the exception data, workflow logic, and metrics, and partnering hands-on with Assurance Engineering on what gets built without needing to write the code; you set up intake, service-level agreements, escalation paths, and metrics, then drive adoption so they stick.

Benefits

In addition to a competitive salary, we offer a variety of benefits to support your needs. The benefits below reflect our US-based offerings; for roles in other locations, benefits vary and are shared during the hiring process.

• Medical, dental, and vision insurance - 100% paid for by CoreWeave
• Company-paid Life Insurance
• Voluntary supplemental life insurance
• Short and long-term disability insurance
• Flexible Spending Account
• Health Savings Account
• Tuition Reimbursement
• Ability to Participate in Employee Stock Purchase Program (ESPP)
• Mental Wellness Benefits through Spring Health
• Family-Forming support provided by Carrot
• Paid Parental Leave
• Flexible, full-service childcare support with Kinside
• 401(k) with a generous employer match
• Catered lunch each day in our office and data center locations
• A casual work environment
• A work culture focused on innovative disruption

Pay

The base salary range for this role is $157,000 to $210,000. The starting salary will be determined based on job-related knowledge, skills, experience, and market location.

Schedule

We strive for both market alignment and internal equity when determining compensation.