Senior Security Technical Program Manager

Are you ready to take on a key leadership role in driving security and privacy initiatives at Moveworks and elevate our standards to new heights? Do you have a passion for working with cutting-edge AI/ML technologies and ensuring a robust security posture in a cloud-only environment at scale? If you're up for the challenge, we have an exciting opportunity for you.

As a Sr Security Technical Program Manager, you will play a critical role in safeguarding our products and services through effective vulnerability management, incident response, bug bounty, security/privacy metrics tracking, and partnerships with engineering teams. You will use your technical security knowledge to successfully drive programs and earn trust from engineers. Reporting directly to the Chief Information Security Officer, you will lead, drive, and monitor programs and initiatives to empower our engineering teams in building secure infrastructure at scale. You will be expected to innovate and improve in the space.

Who we are

Moveworks is on a mission to make language the universal UI. We give enterprises a conversational interface that works across every system — from Microsoft to Workday to Salesforce. Powered by GPT-class machine learning models, the Moveworks platform learns the unique language of each organization to solve thousands of use cases. Brands like Databricks, Broadcom, DocuSign, and Palo Alto Networks leverage Moveworks’ proprietary enterprise data, out-of-the-box solutions, and intuitive developer tools to bring conversational automation to all aspects of their business.

Founded in 2016, Moveworks has raised $315 million in funding, at a valuation of $2.1 billion. We’ve been named to the Forbes AI 50 list for five consecutive years while earning recognition as the winner of the 2023 Edison Awards for AI Optimized Productivity, and as the Best Bot Solution at the 2022 AI Breakthrough Awards. 

Moveworks has over 500 employees in six offices around the world, and is backed by some of the world's most prominent investors, including Kleiner Perkins, Lightspeed, Bain Capital Ventures, Sapphire Ventures, Iconiq, and more.

Come join one of the most innovative teams on the planet!

What you'll bring to the table

• 7+ years of experience in the Security/Privacy space as a Technical Program Manager (or equivalent)
• Strong understanding of vulnerability exposure and effective prioritization methods
• Proficiency in engaging stakeholders to handle security/privacy incidents
• Experience in improving, reporting, and measuring security/privacy metrics across an organization
• Familiarity with conducting external penetration testing programs
• Expertise in cloud infrastructure such as AWS, GCP, and/or Azure
• Previous experience in environments with compliance requirements (SOC2, HIPAA, ISO27001, FedRAMP, etc.)
• BS+ in computer science or a related field, or equivalent relevant experience
• Excellent written and verbal communication skills
• Strong relationship-building skills to influence and motivate diverse job functions
• Exceptional organizational abilities to manage multiple competing priorities effectively
• Ability to make objective decisions based on understanding complex concepts
• Eagerness to delve into problems, drive alignment, and assist with execution through well-documented plans.

Join us in shaping the future of AI security at the fastest-growing startup in this space. At Moveworks, we strike the balance between agility and security to deliver unparalleled value securely to our customers. If you're looking for a dynamic and challenging environment where your expertise can make a difference, apply now!

Responsibilities

Vulnerability Management Program: Take ownership of the vulnerability management program across all products and services. Identify, prioritize, and address vulnerabilities effectively to bolster our security measures.

Incident Response Process: Lead and manage the incident response process, engaging with teams, customers, and leadership. Ensure efficient and clear communications during incidents.

Bug Bounty Management: Collaborating with external security researchers to efficiently assess and categorize vulnerabilities, accurately gauge their impact, and uphold service level agreements (SLAs) during the engagement.

Security/Privacy Metrics and Reporting: Develop and track key security and privacy metrics company-wide.