Senior Technical Program Manager, Security

Details

• Strategic Alignment & Vision: Partner closely with Security leadership and cross-functional stakeholders to translate strategic direction into defined program requirements and measurable outcomes. Ensure program initiatives align with Box's overall security strategy across focus areas including security for AI, infrastructure security, enterprise security, trust and safety, and detection and response.
• Program Planning & Structuring: Bring structure to complex problem spaces by creating and managing comprehensive program plans, roadmaps, timelines, and milestones for critical security initiatives. Translate high-level strategy into actionable execution plans.
• Cross-Functional Program Execution: Lead end-to-end execution of complex, multi-team security initiatives, driving visibility, accountability, and timely resolution of action items across stakeholder teams, managing escalations and present updates and recommendations to leadership.
• Process Optimization & Automation: Identify workflow inefficiencies and design process improvements and automations to scale security delivery across the organization
• Stakeholder Communication & Risk Management: Maintain active, transparent communication channels (e.g., Slack, status reviews, executive updates), respond promptly to inquiries, and escalate program risks or blockers to leadership with clear recommendations and mitigation plans.
• Driving Technical Program Management Discipline & Standards: Partner with TPM leaders across Box to drive discipline, consistency, and standardized program management practices within the Security organization, raising the bar for how security programs are planned, executed, and measured.
• Customer & Business Impact: Champion the connection between security programs and meaningful customer impact, ensuring initiatives deliver tangible value to Box customers while strengthening the company's security posture.
• Flexible Program Support: Lead and support additional technical security programs as needed, applying strong program management fundamentals to a broad range of security challenges.
• 7+ years of experience managing and delivering large-scale security and/or engineering initiatives, including significant experience partnering with engineering, operations, product, legal, and compliance teams
• Highly organized, with strong prioritization skills and a track record of managing multiple, concurrent cross-functional initiatives in a fast-paced environment.
• Demonstrated ability to influence and drive accountability directly with stakeholders across multiple cross-functional areas to lead without direct authority.
• Excellent written and verbal communication skills, with the ability to clearly explain security requirements to technical and non-technical stakeholders and drive consensus on risk decisions.
• Strong analytical and problem-solving skills, including experience building and using metrics/dashboards to track and measure progress towards program delivery and key risk reduction.
• Proficient in Jira and project management/collaboration tools (e.g., Confluence, Airtable, Slack), including using them to manage centralized intake and track cross-functional work.
• Experience within a technology or software company in roles spanning AI security, infrastructure security, detection and response, or enterprise security.
• Demonstrated understanding of how security functions intersect with product, engineering, and IT teams across the full lifecycle, from ideation and design through launch, operations, and incident response.
• Experience applying agile methodologies to security program delivery in cross-functional environments.
• Experience building and maintaining centralized knowledge bases (e.g., Confluence/Box) and developing training and enablement materials to onboard and support security programs.