P4
US Remote
JR103947
About the team
The Governance, Risk & Compliance (GRC) department at HashiCorp is part of the Security organization and drives security policy, controls, audits, risk management, and customer assurance efforts for the company. Our team leads and participates in multifaceted, cross-functional security initiatives, including external audit cycles, recurring security control activities, and projects to implement or remediate controls tied to attestations, regulatory requirements, or customer commitments. Having clear plans, reporting, and communication related to these efforts help us, as well as our partners in Security and other departments, achieve such objectives in effective, predictable ways.
We are looking for an experienced Senior Technical Program Manager to help us improve and streamline the way we plan, prioritize, track, and report on the totality of our work. In this role, you will drive process and alignment in our planning and reporting cycles, including how we establish and organize our goals, as well as how we track and report on our execution against those priorities. You will also manage team and project-oriented programs, both for GRC and other parts of Security, and work with program management counterparts and their stakeholders in other departments to maintain and improve how Security works collaboratively across the business.
Security at HashiCorp is a remote team. While prior experience working remotely is not required, we are looking for team members who can perform well given a high level of independence and autonomy.
What you’ll do (responsibilities)
- Develop, enhance, and drive procedures to help GRC and other Security teams plan and manage and track progress against goals, OKRs, and roadmap
- Manage the preparation, logistics, and communication of security audit and control activities at the program level to help the business respond timely to GRC needs
- Lead Security leadership’s preparation and delivery of execution reviews and readouts of work performed during monthly, quarterly, and annual cycles
- Drive consistent tracking of Security’s KPIs, KRIs, and other metrics that help inform the health of our security program and decisions related to prioritization and risk treatment
- Liaise with program managers and leaders across stakeholder groups to confirm visibility and alignment of cross-functional dependencies tied to planning and execution efforts
- Identify and drive operational process improvements, particularly those involving multiple Security teams or collaboration with other departments (e.g., R&D, Data & Technology)
- Assist with other GRC and Security activities, as needed
What you’ll need (basic qualifications)
- 6+ years of combined experience across Security/GRC and program management roles
- Direct prior experience managing overarching programs and planning for a Security team
- Proven partnership with cross-departmental stakeholders in Engineering, Product, IT, or other technical organizations
- Familiarity with using Atlassian products (e.g., Jira, Confluence) for program and project management use cases
- Ability to help leaders identify and resolve ambiguity in goal planning and work management
- Excellent communication skills, including verbal, written, and presentation
- Ability to track, prioritize, and proactively communicate on multiple simultaneous priorities
- Experience with adapting to shifting priorities and adjusting programs to accommodate
- Ability to perceive challenges and independently develop and propose potential solutions
- Highly responsive and collaborative approach when working with others
- Flexibility in daily hours (e.g., willingness to work longer hours during end of quarter, peak periods, and audits)
What's nice to have (preferred qualifications)
- Previous experience at a technology or SaaS company in similar role
- Relevant program or project management certifications (e.g., PMP, PgMP, Six Sigma)
- Security or compliance-related certifications (e.g., CISA, CISSP, CISM)
#LI-Remote
Individual pay within the range will be determined based on job related-factors such as skills, experience, and education or training.