Senior/Staff Program Manager, Information Security

United States·Foster CityFull-timesenior

SecurityOtherInformation SecurityStaff Program Manager

5 views0 saves0 applied

Apply Now

Quick Summary

Overview

Technical Tools

confluencejiraagilecybersecuritymachine-learningproject-management

The Senior Technical Program Manager will serve as the primary driver for Zoox's Information Security modernization roadmap. As a TPM, you will work cross-functionally with leaders across infosec, product security, platform/cloud engineering, machine learning software teams, and vehicle engineering to execute a massive architectural transformation. You will ensure our security initiatives align with the fast-moving nature of autonomous driving development, emphasizing agility, frictionless access, and iterative progress.

Our InfoSec team is redefining how security operates at Zoox, moving from reactive compliance to proactive engineering enablement. You will manage the programmatic delivery of our four core pillars: Cloud Data Governance, Identity & Zero Trust, Cyber Resilience, and Security Culture. From deploying advanced infosec programs to operationalizing Risk-Based Vulnerability Management and governance guardrails, you will own the critical path. We need a TPM who can seamlessly translate technical debt into business risk for executives, while simultaneously defining clear security program roadmaps.

Drive program strategy and execution by translating corporate security strategy into roadmap backlogs, managing agile ceremonies, and aligning InfoSec with Product, Software, and IT teams.

Own stakeholder communication by maintaining metrics dashboards, drafting Board-level decks using a Problem → Solution → Business Value narrative, and reporting program progress and ROI.

Manage resources and financials in partnership with cross-functional leaders and finance, tracking headcount and budget to keep the program appropriately staffed and funded.

Facilitate clear decision-making by setting meeting agendas, eliminating bottlenecks, and ensuring delivery teams have unambiguous direction at all times.

Develop and maintain program documentation, including process flows, SLAs, acceptable use policies, and company-wide communications.

10+ years of experience in engineering, technical program management, or security operations, with a BS or MS in engineering or computer science.

Deep technical InfoSec expertise, with the ability to lead architecture discussions and align programs to NIST, MITRE frameworks.

Proven risk-averse program delivery across complex, cross-functional security environments.

Agile fluency across Scrum and Kanban, with a track record of unblocking engineering teams and maintaining velocity.

Proficiency in Jira, ServiceNow, and Confluence for tracking resources, velocity, and program health.

Security certification such as CISSP, CISM, or SANS equivalent.

Proven cross-functional leadership with strong references highlighting trusted relationships across senior leaders and engineering teams.

Ability to maintain strategic clarity and tailor concise, well-structured communications to any audience.