Senior Technical Program Manager (Security)

Backblaze is the object storage leader in the open cloud movement, fueling customersuccess with cloud storage built purposefully to unlock budgets, unburden administrators, and unleash innovators. Together with our partners, we’re helping customers break free from the restrictive, overpriced legacy solutions that hold them back, and blaze forward with the full power of the open cloud in their hands. Founded in 2007, we scaled the business with less than $3 million in outside funding until 2021, when we did a traditional IPO on the Nasdaq stock exchange. Today, Backblaze generates over $100m in revenue and is the leading specialized storage cloud - managing over three billion gigabytes of data storage for 500K+ customers in 175+ countries, including businesses, developers, IT professionals, and individuals. But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us. Backblaze is seeking a Senior Technical Program Manager.

We are seeking a Senior Technical Program Manager to join a growing Security team, with focus on program delivery, driving portfolio management and operating model practices for Backblaze.

• →Lead end-to-end planning and execution of enterprise security programs (e.g., vulnerability management, incident response readiness, identity and access management, data protection, cloud security) from initiation through delivery
• →Communicate technical security concepts and program status clearly to both technical teams and non-technical stakeholders
• →Develop and maintain detailed program plans, timelines, budgets, and resource allocation across multiple concurrent security initiatives
• →Identify, track, and mitigate program risks and dependencies, escalating blockers to leadership with clear options and recommendations
• →Drive cross-functional coordination between engineering, product, legal, and third-party vendors to ensure security controls are implemented on schedule
• →Establish and report on program goals, dashboards, and status updates for executive and board-level audiences
• →Manage the intake, prioritization, and tracking of security findings, vulnerabilities, and remediation efforts across teams
• →Support incident response coordination, including post-incident reviews and follow-up action tracking
• →Continuously improve program management processes, tooling, and governance frameworks specific to security operations
• →Foster a culture of transparency and trust, apply lean value-driven approach, manage by influence, support and empower technical teams through servant leadership
• →In partnership with other TPMs, participate in implementation of continuous cross-functional process improvement initiatives

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field (or equivalent practical experience); Master's degree a plus
• 8+ years of technical program management experience, including 3+ years managing security-focused programs
• Strong understanding of security domains: vulnerability management, threat modeling, identity and access management, network security, cloud security, and incident response
• Familiarity with regulatory and compliance frameworks such as SOC 2, ISO 27001, NIST CSF, GDPR, HIPAA, or FedRAMP
• Relevant security certifications, such as:
• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• PMP (Project Management Professional) or PgMP (Program Management Professional)
• CRISC (Certified in Risk and Information Systems Control)
• CCSP (Certified Cloud Security Professional)
• Cloud security certifications (e.g., AWS Certified Security – Specialty, Microsoft Certified: Security Operations Analyst Associate)

• Ability to adapt agile management principles to a variety of development environments
• Proven ability to manage multiple complex, cross-functional programs simultaneously in a fast-paced environment
• Excellent written and verbal communication skills, with the ability to translate technical risk into business impact for executive audiences
• Strong analytical and risk-assessment skills, with experience using program management and ticketing tools
• Demonstrated ability to build trust and influence without direct authority across engineering, legal, and executive teams
• High attention to detail, sound judgment under pressure, and comfort operating with ambiguity during active incidents
• Experience with Atlassian & Google product suites a plus