Technical Program Manager, Security & GRC - 11745

What You’ll Do

Manage and scale multiple security programs by defining milestones, success criteria, resource allocation, progress tracking and successful on-time delivery of security and access management solutions.

Collect business and operational requirements from internal teams, and help document business/process requirement specifications.

Proactively identify and resolve delivery impediments, risks, and issues affecting projects, and drive automation and process improvements for the security and governance programs.

Participate in operational security workflows, vulnerability management patching, IAM initiatives and Governance programs.

Set up clear, concise reporting dashboards to share real-time program status reports on key metrics and KPIs directly to the Executive Leadership.

Guide and coach engineering squads on Agile/Scrum practices to ensure sustainable and comfortable delivery paces.

Support and facilitate evidence collection for internal and external audits/assessments (such as SOC 1 and 2, PCI, FedRAMP, and ISO 27001).

Advocate for and implement tooling and dashboards to improve traceability and transparency across risk initiatives.

What You Will Bring to Coupa

5+ years of experience managing technical security, risk, or compliance projects—preferably in a SaaS environment.

Bachelor’s degree in a technical field, cybersecurity, or equivalent experience; relevant industry certifications (e.g., CISSP, CISA, CRISC, PMP) are highly desirable.

Expertise with Jira, Confluence, and project portfolio management tools.

Highly organized with great attention to detail and analytical skills, follow-up, and follow-through across multiple concurrent initiatives.

Self-starter with strong time management, prioritization, and organizational skills.

Ability to thrive in fast-paced, evolving environments while driving structured outcomes.

Working knowledge of Jira, Confluence, Google Workspace, Slack, and related AI capabilities.

Excellent written and verbal communication skills, with the ability to collaborate in a globally distributed team setup.

Strong understanding of cloud-based software (SaaS), AWS, GCP, and cybersecurity/privacy frameworks (e.g., NIST, SOC 2, ISO 27001).