Senior Technical Program Manager, Security

Senior Technical Program Manager, Security ABOUT STRAVA Strava is the app for active people. With over 180 million athletes in more than 185 countries, it’s more than tracking workouts—it’s where people make progress together, from new habits to new personal bests. No matter your sport or how you track it, Strava’s got you covered. Find your crew, crush your goals, and make every effort count. Start your journey https://www.strava.com/subscription with Strava today. Our mission is simple: to motivate people to live their best active lives. We believe in the power of movement to connect and drive people forward. ABOUT THIS ROLE We are seeking a Senior Technical Program Manager to lead complex, high-priority security programs that span Engineering, Infrastructure Product, Legal, Operations, and other cross-functional teams. This role will provide dedicated program management support for security initiatives, ensuring clear communication, effective processes, and structured execution across the organization. The ideal candidate has experience managing complex technical programs, a strong understanding of security concepts, and the ability to partner with engineering and product teams to implement secure, scalable solutions. You will thrive in a fast-paced, sophisticated environment and will be responsible for driving programs from conception through delivery, mitigating risks, and ensuring alignment across multiple stakeholders. We follow a flexible hybrid model that translates to more than half your time on-site in our SF office — three days per week. WHAT YOU’LL DO - Drive end-to-end delivery of multi-quarter security initiatives—such as IAM upgrades, vulnerability-management improvements, compliance readiness efforts, and security architecture changes—from proposal through launch, operational rollout, and post-launch optimization. - Coordinate execution across Engineering, IT, Product, Legal, and GRC, serving as the central point of alignment across time zones to remove ambiguity, streamline decision-making, and maintain forward momentum. - Own program communications, producing clear status updates, designing and pulling key metrics, executive briefings, risk logs, and decision records to ensure stakeholders at all levels have timely, actionable visibility. - Identify and mitigate risks early by conducting structured dependency, resourcing, and requirements assessments; evaluate whether technical implementation plans meet security, compliance, and business objectives. - Serve as the escalation channel for delivery risks, blockers, and cross-team conflicts, ensuring issues are triaged and resolved rapidly. - Implement and maintain tooling workflows in Jira, Confluence, Airtable, and related platforms to support roadmap tracking, milestone management, capacity planning, and documentation quality. WHAT YOU’LL BRING TO THE TEAM - 4+ years of program management experience delivering complex software or security programs in an engineering-driven organization. - Demonstrated success executing initiatives involving security controls, risk reduction, and compliance frameworks (e.g., PCI-DSS, NIST CSF). - Experience defining program scope, success metrics, and milestone plans that directly support broader product, engineering, and security strategies. - Proven ability to translate between technical and non-technical stakeholders, driving aligned decisions and clear system-level understanding. - A deep understanding of the software development lifecycle, including planning, prioritization, dependency management, and release coordination. - A track record of fostering collaboration, guiding diverse stakeholders (engineering, product design, legal, IT, operations) toward shared outcomes. - A proactive, resourceful work style, bringing structure, creativity, and energy to ambiguous or evolving problem spaces. For more information on benefits, please click here https://docs.google.com/document/d/e/2PACX-1vTkFMPz3eCjd0F ... (truncated, view full listing at source)