Principal Security Program Manager

Job Title: Principal Security Program Manager

Reports to: CISO

Location: Remote

We are looking for a Principal Security Program Manager to support a healthy, high-performing security, IT, cloud, and compliance program. This role will partner with and report directly to the CISO owning project execution, operating cadence, deadlines, meeting outcomes, Jira/Confluence hygiene, dashboards, and cross-functional follow-through.

This person must have hands-on experience working inside cybersecurity programs and be comfortable operating across security engineering, IT operations, cloud infrastructure, compliance, and executive communication. The ideal candidate is a strong project owner, an excellent technical writer, a sharp meeting facilitator, and a trusted operating partner who can keep the organization consistently progressing.

You are a senior operator who has lived inside cybersecurity programs and understands how security, IT, cloud, compliance, and MDR work actually get done. You are organized, direct, technically fluent, and an excellent communicator. You can sit in a room with engineers, understand the work, identify the gaps, document the outcome, and drive the next step without needing constant direction. This is a high-trust role for someone who wants to help run the operating system of a modern security organization.

Core Responsibilities:

• Own the full portfolio of security, IT, cloud, and compliance projects.
• Keep Jira, Confluence, dashboards, timelines, owners, blockers, and status updates accurate at all times.
• Drive projects from intake to completion with clear owners, deadlines, dependencies, decisions, and next steps.
• Run meetings independently, capture outcomes, and deliver clear, accurate summaries with action items.
• Act as a trusted extension of the CISO for the IT team and cross-functional workstreams.
• Turn conversations, risks, requests, and open questions into actionable Jira stories, projects, timelines, and measurable outcomes.
• Provide CISO with concise executive briefings on status, risks, deadlines, upcoming milestones, blockers, and decisions needed.
• Hold project owners accountable for commitments, deadlines, updates, and open actions.
• Improve the security program’s operating rhythm, documentation quality, meeting discipline, project visibility, and overall organization.
• Utilize AI tools responsibly to increase project speed, elevate documentation, summarize meetings, identify gaps, and create executive-ready updates.
• Maintain exceptional accuracy, completeness, and attention to detail across all project tracking, documentation, and reporting.
• Support program maturity across vulnerability management, incident response, compliance, cloud security, IT operations, endpoint, identity, governance, and MDR/SOC operations.

Required Experience:

• 7 - 10 years of experience in cybersecurity, IT, technical program management, security operations, compliance, or related roles.
• Prior experience working directly within a cybersecurity program.
• Strong understanding of security, IT, cloud, compliance, and operating models.
• Deep experience with Jira and Confluence is required.
• Strong working knowledge of Slack, macOS, and Google Workspace.
• Proven ability to manage multiple technical projects simultaneously, deadlines, owners, dependencies, and competing priorities.
• Excellent written communication, documentation and cross functional alignment strategy.
• Experience leading meetings independently with technical teams, vendors, stakeholders, and leadership.
• Strong knowledge of compliance programs, audits, evidence collection, control tracking, and security governance.
• Ability to operate with urgency, ownership, discretion, and minimal supervision.

Preferred Experience:

• Familiarity with security frameworks such as SOC 2, ISO 27001, NIST, and ISO 42001.
• Experience supporting cloud security programs across AWS, Azure, or GCP.
• Experience working with ServiceNow, GRC tools, vulnerability management platforms, SIEM, EDR, or identity platforms.
• Prior experience as a Principal Program Manager, Security Program Manager, IT Chief of Staff, Manager of Security, or Senior Technical PM.

What Success Looks Like:

• Projects have clear ownership, timelines, tracking, status, blocker support and documented next steps.
• Meetings produce decisions, action items, and follow-through.
• Security, IT, cloud, and compliance work is visible, organized, and progressive.

Statutory Pay Disclosure:

The anticipated base salary range for this role is $165,000 - $185,000 + bonus + stock options + benefits. Actual compensation may vary from posted hiring range based upon geographic location, work experience, education, and/or skill level.

ITAR Compliance

“This position will have access to customer data and as such is subject to International Traffic in Arms Regulations (ITAR). Upon application, candidates will be asked to confirm that they are a U.S. Person as defined by the following:

• A citizen of the U.S.;
• A lawful permanent resident of the United States; 
• A person admitted to the United States as a refugee; or
• A person that has been granted asylum by the United States government.”

The intent of this requirement is not to verify employment eligibility overall, but to ensure compliance with import/export regulations. If you do not meet these requirements, we encourage you to apply for other open roles at Deepwatch. This information will be verified upon offer of employment.”