03 Nov
|
Wwshemi
|
Toronto
BeyondTrust is a place where you can bring your purpose to life through the work that you do, creating a safer world through our cybersecurity SaaS portfolio. You will be surrounded by people who challenge, support, and inspire you to be the best version of yourself. As a Senior Security Technical Program Manager at BeyondTrust, you will use your technical expertise, business acumen and security domain knowledge to manage and streamline critical CISO Office operations and programs. In this role, you will be an advocate for building seamless and metrics-driven operational frameworks. You will be responsible for working collaboratively with CISO Office teams and business stakeholders to identify operational gaps, document requirements and needs, metrics visualization, and execute programs to streamline the way BeyondTrust build and retains customer trust. Oversee, plan, and manage security initiatives for all security pillars. ~ Serve as the Security TPM for the security issues management program, running the end-to-end lifecycle on the security issues management Jira board from identification and triage through handoff, validation, closure, and reporting. ~ Triage every current issues against the priority rubric (exploitability, blast radius, data sensitivity, regulatory or audit linkage, and compensating controls), confirm or adjust the Reporter’s initial priority, and set a due date at triage, hand off to Assignee as identified. ~ Monitor additional issues through the recurring security issues management review and step in when an escalation trigger fires. ~ Enforce the analysis gate before handoff, approving a ticket as handoff-ready only when root cause, a specific recommended remediation, named impacted systems and teams, and verifiable acceptance criteria are documented.
~ Confirm Assignee remediation plans meet the acceptance criteria without redesigning them, and help surface cross-team dependencies such as budget, tooling, or other teams. ~ Run the recurring cross-functional security issues review, require an updated due date and logged reason for any slippage, and act as decision-maker on priority and acceptance-criteria disputes, escalating unresolved disagreements to the Sponsor. ~ Formally close security issues only after independent Security validation passes, and reopen failed validations to the Assignee with the specific gap noted. ~ Maintain security issues management board hygiene, including identifying duplicate or overlapping tickets, consolidation opportunities, and tickets missing descriptions, due dates, or owners. ~ Create detailed project plans to support each initiative while defining and supporting metric visualization for all of BT. ~ Provide a steady stream of ideas and solutions during security initiatives to introduce innovation and improve operational efficiency. ~ Implement relevant metrics to measure security specific program success, including the security issues management program health (open and closed volume by priority tier, overdue tickets, tickets not yet accepted, and due-date slippage). ~ Identify cross-team dependencies to incorporate them into the program planning process.
~ Ensure root cause analysis is completed for technical issues and security findings, and shepherd the implementation of solutions through accountable owners. ~ Make necessary recommendations for adjustments to security processes based on performance metrics. ~ Influence strategic decisions about security direction. ~ Participates in building and managing of AI processes to create operational efficiency. ~ Manage project escalations and help assemble project teams to tackle critical items, including executing the security issues management program’s defined escalation triggers (non-acceptance, unlogged slippage, and overdue or Critical findings) to the Assignee’s Manager, Trust & Assurance Leadership, or the ELT Sponsor. Bachelor's degree in technology, Business Administration, Computer Science, or related field ~5-7 years of relevant professional experience in security, project management, or technology ~ Proficient level of understanding security domains ~ Experience in communicating technical concepts to non-technical audiences and vice versa. ~ Experience with creative problem solving in a fast-paced and ever-changing environment. ~ Experience in Security or Cloud software solutions ~ Ability to recognize, evaluate and reduce program risks ~ Excellent stakeholder management skills ~ Demonstrated experience running a security findings, vulnerability management, or audit remediation program across multiple engineering and business teams, from intake and prioritization through verified closure ~ Experience applying structured risk-scoring methods (e.g., Proven ability to drive accountability with owners outside your reporting line, including formal handoffs, acceptance, and escalation to senior leadership ~ Security certification, e.g.
📌 Senior Security Technical Program Manager (Toronto)
🏢 Wwshemi
📍 Toronto