Principal Security Program Manager

Who you are

• This leader must have hands-on experience working inside cybersecurity programs and be comfortable operating across security engineering, IT operations, cloud infrastructure, compliance, and executive communication
• The ideal candidate is a strong project owner, an excellent technical writer, a sharp meeting facilitator, and a trusted operating partner who can keep the organization consistently progressing
• You are a senior operator who has lived inside cybersecurity programs and understands how security, IT, cloud, compliance, and MDR work actually get done. You are organized, direct, technically fluent, and an excellent communicator
• You can sit in a room with engineers, understand the work, identify the gaps, document the outcome, and drive the next step confidently
• This is a high-trust role for someone who wants to help run the operating system of a modern security organization
• 7 - 10+ years of experience in cybersecurity, IT, technical program management, security operations, compliance, or related roles
• Prior experience working directly within a cybersecurity program
• Strong understanding of security, IT, cloud, compliance, and operating models
• Deep experience with Jira and Confluence is required
• Strong working knowledge of Slack, macOS, and Google Workspace
• Proven ability to manage multiple technical projects simultaneously, deadlines, owners, dependencies, and competing priorities
• Excellent communication, documentation and cross functional alignment strategy
• Experience leading stakeholders cadences independently with technical teams, vendors, stakeholders, and leadership
• Strong knowledge of compliance programs, audits, evidence collection, control tracking, and security governance
• Ability to operate with urgency, ownership, discretion, and minimal supervision
• Familiarity with security frameworks such as SOC 2, ISO 27001, NIST, and ISO 42001
• Experience supporting cloud security programs across AWS, Azure, or GCP
• Experience working with ServiceNow, GRC tools, vulnerability management platforms, SIEM, EDR, or identity platforms
• Prior experience as a Principal Program Manager, Security Program Manager, IT Chief of Staff, Manager of Security, or Senior Technical PM

What the job involves

• We are looking for a Principal Security Program Manager to support a high-performing security, IT, cloud, and compliance program
• This role will partner with and report directly to the CISO owning project execution, operating cadence, deadlines, meeting outcomes, Jira/Confluence hygiene, dashboards, and cross-functional follow-through
• Reports to: CISO
• Own the full portfolio of security, IT, cloud, and compliance projects
• Ensure Jira, Confluence, dashboards, timelines, owners, blockers, and status updates are consistently accurate
• Drive projects from intake to completion with clear ownership, deadlines, dependencies, decisions, and next steps
• Drive meetings independently, capture outcomes, and deliver clear, accurate summaries with action items
• Act as a trusted extension of the CISO for the IT team and cross-functional workstreams
• Turn conversations, risks, requests, and open questions into actionable Jira stories, projects, timelines, and measurable outcomes
• Provide CISO with concise executive briefings on status, risks, deadlines, upcoming milestones, blockers, and decisions needed
• Hold project owners accountable for commitments, deadlines, updates, and open actions
• Improve the security program’s operating rhythm, documentation quality, meeting discipline, project visibility, and overall organization
• Utilize AI tools responsibly to increase project speed, elevate documentation, summarize meetings, identify gaps, and create executive-ready updates
• Maintain exceptional accuracy, completeness, and attention to detail across all project tracking, documentation, and reporting
• Support program maturity across vulnerability management, incident response, compliance, cloud security, IT operations, endpoint, identity, governance, and MDR/SOC operations
• What Success Looks Like:
• Projects have clear ownership, timelines, tracking, status, blocker support and documented next steps
• Meetings produce decisions, action items, and follow-through
• Security, IT, cloud, and compliance work is visible, organized, and progressive

The application process

• Upon application, candidates will be asked to confirm that they are a U.S. Person as defined by the following:
• A citizen of the U.S.
• A lawful permanent resident of the United States
• A person admitted to the United States as a refugee; or
• A person that has been granted asylum by the United States government.”
• The intent of this requirement is not to verify employment eligibility overall, but to ensure compliance with import/export regulations

Benefits

• Insurance plan options, including 100% employer premium contributions and HSA contributions for certain coverage
• Employer paid Life Insurance, Short-term and Long-term Disability, and Employee Assistance Program
• Supplemental coverage options
• Holistic employee Wellness program
• Flexible Time Off
• Paid Parental Leave
• Stock Options
• 401k with company match
• $200 Monthly reimbursement for Cell/Internet
• Annual recognition awards
• Spot bonus awards
• Employee and Customer Referral Bonus Programs
• Annual credit to Deepwatch Swag Store
• Professional Development Allowance: $3,000 in your first year and $6,000 annually thereafter
• Formal Leadership Development Program
• Employee-driven, company-wide Mentoring Program
• Paid time off for volunteering and voting
• Support for company-wide initiatives, such as Stem for Her and local initiatives like Feeding Tampa Bay
• Sponsored Employee Affinity Groups, including Women of Deepwatch, BIPOC, and DW Veterans
• Annual Company Kick Off Event, Monthly All Hands calls, cross functional initiatives, social events, interactive wellness programs, and department offsite meetings
• Peer Recognition Program (Radical Performer)