Program Management Jobs

At Asana, security is foundational to our mission of helping teams work together effortlessly. Our security team protects Asana's employees, users, and customers by proactively addressing threats, ensuring compliance, and fostering a culture of security throughout our product and operations. As the Security Risk Manager, you will own Asana's internal security risk management program end-to-end. This is a senior role for someone who goes beyond frameworks and checklists — you will engineer the quantitative and automated foundations that let Asana continuously measure and make confident decisions about security risk. You'll build the systems and processes that make risk scalable, not just the policies that describe it, and serve as a trusted advisor to senior leadership. This role is based in our San Francisco office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner. If you're interviewing for this role, your recruiter will share more about the in-office requirements What you'll achieve Own Asana's security risk management program: Design and continuously mature a quantitative risk framework — including risk scoring methodologies, likelihood and impact modeling, and risk appetite thresholds — that enables consistent, data-driven risk decisions across the organization. Build and maintain a living risk register: Own Asana's central security risk register, developing KRIs, tracking trends over time, and driving accountability for risk treatment and remediation with business and technical owners. Automate risk identification and monitoring: Design and implement automated data pipelines and integrations that continuously surface security risks — pulling signals from vulnerability scanners, cloud security tooling, SIEMs, and third-party risk sources — so Asana's

At Jamf, we believe in an open, flexible culture based on respect and trust. Our track record and thriving work environment all stem from the freedom we grant ourselves to get the job done right. We take pride in helping tens of thousands of customers around the globe succeed with Apple. The secret to our success lies in our connectivity, while operating with a high degree of flexibility. Work-life balance remains our priority while feeling connected is important to maintain our strong culture, achieve our goals, and thrive as #OneJamf. What you'll do at Jamf: The Technology Disaster Recovery Manager leads the development, implementation, and maintenance of Jamf’s business continuity management program to ensure disaster resilience. Reporting to the Director of Business Continuity, the Disaster Recovery Manager will be the single-threaded owner for day-to-day DR operations—driving orchestrated recovery execution, maintaining Jamf’s technology stack runbooks, coordinating cross-technology teams, and ensuring audit-ready evidence for DR exercises and an annual DR roadmap and recovery exercise calendar. The Manager will align DR capabilities with PD&D architecture and regulatory and compliance standards while continuously improving resiliency across the organization. What you can expect to do in this role: Oversee the development of disaster recovery operations and runbooks, in partnership with Product Development & Delivery (e.g. Product Management, Software Engineering) by developing, maintaining, and continuously improving recovery documentation aligned with the enterprise DR framework. Serve as a trusted advisor to PD&D leaders, elevating disaster recovery operations to a strategic priority rather than a reactive process. Partner with PD&D to engineer and operate DR solutions across multi-cloud environments (e.g., AWS and Azure), leveraging cloud-native patterns such as active/active, regional failover, immutable infrastructure, and serverles

At Jamf, we believe in an open, flexible culture based on respect and trust. Our track record and thriving work environment all stem from the freedom we grant ourselves to get the job done right. We take pride in helping tens of thousands of customers around the globe succeed with Apple. The secret to our success lies in our connectivity, while operating with a high degree of flexibility. Work-life balance remains our priority while feeling connected is important to maintain our strong culture, achieve our goals, and thrive as #OneJamf. What you'll do at Jamf: The Business Continuity Manager leads the development, implementation, and maintenance of Jamf’s business continuity management program to ensure operational resilience. Reporting to the Director of Business Continuity, the Manager plays a critical role in preparing for and protecting Jamf from potential disruptions, ensuring business operations can continue during and after a crisis. Responsibilities involve a strategic blend of risk assessment, contingency planning, and stakeholder communication to maintain operational resilience. Also works with cost center departments to perform business impact analyses (BIAs) and risk assessments; assists in business continuity plan (BCP) development and maintenance; conducts and evaluates BCP exercises; promotes program initiatives through training and awareness; and maintains emergency preparedness activities. What you can expect to do in this role: Drive adoption and execution of Jamf’s business continuity program by facilitating business impact analysis and risk assessments, assisting with business continuity and IT disaster recovery plan development and maintenance, and designing, organizing, and facilitating tabletop exercises to validate continuity and resilience plans and strengthen organizational resilience. Ensure continuity plans align with enterprise crisis management processes, corporate IT-DR capabilities, cyber incident response, and incident managem

Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The role In this role, you will participate in the development, implementation and administration of the Compliance Management Program for the SoFi Invest product group. You will provide primary compliance coverage in support of the registered investment adviser, SoFi Wealth. The main objective of this role is to serve as a trusted adviser and partner to the business units responsible for driving the growth of the broader Invest product offerings (including SoFi Wealth), while mitigating regulatory risk to the SoFi enterprise. You will participate in various committees, audits and examinations, as well as test the processes and infrastructure for the investment adviser and broker dealer that facilitate Invest activities through the administration and maintenance of the Compliance Risk Assessment and Annual Reviews. You will advise the Compliance and Legal teams on emerging compliance issues, regulatory changes, and new rules, and consult and guide the company in the establishment of controls to mitigate risks. You will engage with business partners to offer appropriate knowledge, expertise and business acumen to meet the increasing demands of a rapidly changing regulatory environment. What you’ll do: Day-to-day responsibility for management and ongoing evolution of the firm's investment advisory compliance

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Manager, Corporate Treasury Overview Mastercard is looking for a Manager, FX Trading & Strategy to join the New York City office and oversee daily FX trading, risk management and support the implementation of new processes and procedures. The responsibilities for this role include: • Develop new foreign exchange capabilities to support business initiatives involving cross-border payments • Define FX desk workflows, policies, procedures, and implement a high level of automation • Execute the company’s foreign exchange risk management program and strategies • Monitor FX trade executions and open positions • Measure FX risk according to company policy and report exposures to senior management • Analyze approaches to optimize risk management • Onboard trading partners • Identify requirements to trade exotic currencies • Support the testing of FX risk management, quoting, and trading systems • Communicate relevant news, market events, and FX system behavior to team members • Analyze market trends (liquidity, spreads, volatility, etc.) for the business • Evaluate business cases for incremental revenue opportunities related to foreign exchange transactions and support the business with project-based FX analysis • Contribute to all aspects of the trading desk activities incl

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive. Lyft connects people to transportation to change the way we live and get around our communities. Our drivers and passengers entrust Lyft with their personal information and travel details to get where they are going and expect us to keep that data safe. Lyft's Privacy and Compliance team ensures that appropriate security controls and data protections are applied to meet our compliance requirements and customer obligations We conduct security risk assessments, consult with organizational stakeholders, monitor and continuously improve Lyft's Information Security program, facilitate third-party security audits, work with engineering teams to implement, automate, and monitor security controls, develop policies, and advise on all matters related to information security assurance. We also conduct risk assessments of our third parties to ensure we understand and can mitigate any associated risk. We are looking for a highly motivated, organized, and detail-oriented individual to join our Privacy and Compliance team. As a senior member of this team, you will support our third party risk management program by conducting risk assessments and recommending mitigations. You will also help our Customer Trust team by completing inbound security and data protection questionnaires from potential partners and customers. Responsibilities: Third Party Risk Assessments Review vendor or partner requests from internal stakeholders, understanding the business purpose Work with external stakeholders to collect relevant security and data protection information from third parties Review the information and accurately assess and document the risk, and propose potential mitigations Security Questionnaires Draft responses to customer security questionnaires (e.g., CAIQ, SIG) and assist in the ma

Our Purpose Mastercard powers economies and empowers people in 200&#43; countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Senior Software Engineer (Java) Job Description Summary Who is Mastercard? Mastercard is a global technology company in the payments industry. Our mission is to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments, and businesses realize their greatest potential. Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. With connections across more than 210 countries and territories, we are building a sustainable world that unlocks priceless possibilities for all. Overview • The Decision Management program enables intelligent decision-based products through streaming analytics with the ability to govern these decisions and manage their outcomes with business agility. • This program leverages business rules & AI engines, a streaming big data cluster, an in-memory data grids, APIs, & UIs to deliver real time decisions at global scale • This person will be responsible for mentoring the team as well as stay hands on. We are looking for a Senior Software Developer to join our DMP team in Vancouver office.<

Who Are We HALA is a leading fintech player in the MENAP region that aims to redefine financial services and build the future bank of SMEs. HALA aims at empowering SMEs to start, run, and grow their businesses by providing them with cutting-edge financial and technological tools. HALA currently holds multiple entities in UAE, Saudi Arabia and Egypt (including HALA Payments and HALA Logistics) and offers solutions that enable merchants to digitize their payments as well as manage their sales and operations. Founded in 2017, HALA is currently licensed by the Saudi Arabian Central Bank. Responsibilities Governance & Strategy: Develop, implement, and continuously improve the organization's Information Security Governance framework, policies, standards, and procedures. Lead the creation and execution of the Cyber Security Strategy in alignment with the company's overall business goals. Providing regular reports to the Board of Directors and executive management on the state of cybersecurity. Establish and manage a security metrics and Key Performance Indicator (KPI) program to measure the effectiveness of the security program and report on progress. Oversee the information security budget, ensuring resources are allocated effectively to manage risk. Risk Management: Design and manage a comprehensive enterprise-wide Cyber Security Risk Management program. Conduct regular risk assessments, including Business Impact Analysis (BIA), to identify, analyze, and evaluate information security risks. Facilitate risk treatment planning with business and technology owners, ensuring appropriate mitigation, acceptance, or transfer strategies are implemented. Manage the vendor risk management program, assessing the security posture of

About AlphaSense: The world’s most sophisticated companies rely on AlphaSense to remove uncertainty from decision-making. With market intelligence and search built on proven AI, AlphaSense delivers insights that matter from content you can trust. Our universe of public and private content includes equity research, company filings, event transcripts, expert calls, news, trade journals, and clients’ own research content. The acquisition of Tegus by AlphaSense in 2024 advances our shared mission to empower professionals to make smarter decisions through AI-driven market intelligence. Together, AlphaSense and Tegus will accelerate growth, innovation, and content expansion, with complementary product and content capabilities that enable users to unearth even more comprehensive insights from thousands of content sets. Our platform is trusted by over 6,000 enterprise customers, including a majority of the S&P 500. Founded in 2011, AlphaSense is headquartered in New York City with more than 2,000 employees across the globe and offices in the U.S., U.K., Finland, India, Singapore, Canada, and Ireland. Come join us! About the Role AlphaSense is maturing its security risk management program and needs a Senior Risk Analyst to be a core builder and operator of that function. You will design, implement, and mature a risk framework that spans information security, AI, and operational risk—building toward a program that is quantitative-leaning, connected to live data sources, and actionable at every altitude from service owner to executive leadership. You will establish risk identification and scoring methodologies, own the enterprise risk register, and produce risk intelligence that drives real decisions. You will also support the TPRM function led by a dedicated TPRM lead, contributing to assessments and risk tracking as needed. You approach this with an AI-native mindset: using AI to monitor threat landscapes, analyze risk data, draft risk narratives, and surface emerg

Join us in building the future of finance. Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic cultural and financial shift, keep reading. About the team + role We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. The Crypto Risk team 's mission is to identify, assess, and mitigate risk across our products, operations, and platforms, protecting customers and the firm as the business scales. We work to deliver an excellent end-customer experience while upholding the safety and soundness of the business, so Robinhood can keep expanding access to crypto responsibly. As Robinhood expands its operations in Canada, we are building an independent risk management function to support that growth. As our new Crypto Risk Lead , you will own the design, implementation, and ongoing operation of an independent risk management program for Robinhood's Canadian crypto business. This role is based in our Toronto, ON office, with in-person attendance expected at least 3 days per week. At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams. What you’ll do Implement and own Canada's independent risk management program, adapting Robinhood's global risk framework to meet Canadian regulatory expectations, including C

MongoDB Technical Services Engineers use their exceptional problem solving and customer service skills, along with their deep technical experience, to advise customers and to solve their complex MongoDB problems. Technical Service Engineers are experts in the entire MongoDB ecosystem - database server, drivers, cloud and infrastructure. This also includes services such as Atlas (database as a service), or Cloud Manager (which helps customers with automation, backup and monitoring of their MongoDB systems). Our engineers combine their MongoDB expertise with passion, initiative, teamwork and a great sense of humor to achieve exceptional results for our customers. We are looking to speak with candidates based on the east coast for this remote role. Weekend Schedule Information: Schedule during the 6-9 month ramp period: Monday - Friday 7 AM - 4 PM ESTWeekend schedule post-ramp: Saturday - Wednesday 7 AM - 4 PM EST This schedule includes a mandatory 1 hour lunch break to ensure hand-over to 2nd shift from 3 - 4 PM. There will be a 20% uplift on your base salary for this weekend shift & there are no on-call requirements for your off days. The Federal Risk and Authorization Management Program (FedRAMP) is a US government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services. Our FedRAMP program requires that anyone who is accessing customer data or metadata inside the Authorization Boundary be a US Citizen on US Soil. In order for us to triage and assign cases, it is necessary to be able to identify available resources at any given time. For this reason the FedRamp team is composed of three separate shifts: first shift, second shift, and third shift. Due to the 24/7 nature of our support organization, certain events throughout the year will require volunteering for coverage outside one's normal work days or work hours (i.e. regional offsites, regional holidays, et

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As the Senior Director, Internal Audit you'll report to the Vice President, Internal Audit, and help strengthen GitLab's Internal Audit function. You'll turn an established audit methodology into consistent, practical ways of working, guide audit quality and execution, and help prepare and implement a risk-based audit plan that addresses GitLab's strategic, business, and compliance objectives. You'll also support the Internal Audit strategy and roadmap, lead the facilitation of our enterprise risk management program, and build trusted relationships with business partners across GitLab. What you’ll d

MongoDB Technical Services Engineers use their exceptional problem solving and customer service skills, along with their deep technical experience, to advise customers and to solve their complex MongoDB problems. Technical Service Engineers are experts in the entire MongoDB ecosystem - database server, drivers, cloud and infrastructure. This also includes services such as Atlas (database as a service), or Cloud Manager (which helps customers with automation, backup and monitoring of their MongoDB systems). Our engineers combine their MongoDB expertise with passion, initiative, teamwork and a great sense of humor to achieve exceptional results for our customers. We are looking to speak with candidates based on the east coast for this remote role. After a 6-9 month ramp period, Monday to Friday from 7 AM - 4 PM EST, the schedule will shift permanently to Saturday to Wednesday or Wednesday to Sunday from 7 AM - 4 PM EST. There will be a 20% uplift on your base salary for this weekend shift & there are no on-call requirements for your off days. Shifts include a mandatory 1 hour lunch break. The Federal Risk and Authorization Management Program (FedRAMP) is a US government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services. Our FedRAMP program requires that anyone who is accessing customer data or metadata inside the Authorization Boundary be a US Citizen on US Soil. In order for us to triage and assign cases, it is necessary to be able to identify available resources at any given time. For this reason the FedRamp team is composed of three separate shifts: first shift, second shift, and third shift. Due to the 24/7 nature of our support organization, certain events throughout the year will require volunteering for coverage outside one's normal work days or work hours (i.e. regional offsites, regional holidays, etc). These are typically announced weeks in advance wit

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team Stripe MALPB operates in a highly complex, fast-moving regulatory environment. The Risk and Compliance team is responsible for ensuring that our expansion is grounded in a bulletproof governance framework that matches the speed of our technology. Having successfully established our foundational ERM policies, taxonomy, and risk registers, we are entering the integration phase. This team is building the future of "AI-Native" risk management—where governance frameworks are embedded into daily business operations through automated data pipelines, machine learning, and LLM orchestration. What you’ll do As the sole dedicated ERM Lead for Stripe MALPB, you will own the enterprise risk program end-to-end. This is a unique hybrid role designed for a technically fluent risk architect. Roughly 1/3rd of your time will be dedicated to ERM Integration and Execution: rolling out our mature risk framework to the First Line (1LoD), running the RCSA cycle, managing the control library, and synthesizing risk scorecards for executive and Board-level reporting. Roughly 2/3rds of your time will be dedicated to AI and Control Automation Design: acting as a hands-on developer to build and scale LLM tools, automated evidence-collection scripts, and real-time monitoring workflows that eliminate manual compliance overhead. Responsibilities ERM Framework Integration & Execution (1/3rd) Enterprise Rollout: Drive the cross-functional implementation and adoption o

Location: Remote (U.S.) Clearance: U.S. Citizen or Permanent Resident Required with the ability to obtain a Public Trust Salary Range: 110K – 125K LTS is seeking a Senior Security RMF Engineer to join a cybersecurity transformation surge team supporting the VA.gov Platform. This role will serve as the bridge between VA security/RMF requirements and the engineers responsible for implementing those requirements across VA.gov. The Senior Security / RMF Engineer must understand how security controls are implemented in modern cloud infrastructure and software delivery environments and be able to translate control deficiencies, authorization requirements, and security risks into actionable engineering work.This is not intended to be a documentation-only compliance role. This individual will work closely with DevSecOps engineers and the existing VA.gov Platform ATO/security team to assess the current security posture, address gaps in VA.gov's Critical Controls, support ATO/cATO readiness, improve authorization artifacts, and automate evidence and control assessment wherever possible. The PWS specifically describes the desired model as one in which ATO/RMF documentation confirms security rather than defines it, with success measured through risk reduction and security outcomes rather than paperwork completeness. What You’ll Do: Assess VA.gov Platform compliance with the 18 Critical Controls identified by VA and help establish a baseline of current implementation and remaining gaps. Perform security reviews, gap analyses, and risk assessments across VA.gov Platform infrastructure, pipelines, applications, and component systems. Support ongoing ATO and cATO readiness for the VA.gov Platform authorization boundary. Develop, update, and maintain RMF and authorization artifacts, including System Security Plans (SSPs), control narratives, POA&Ms, Business Impact Analyses (BIAs), Privacy Threshold Analyses (PTAs), and supporting evidence. Evaluate identified