Technical Program Manager

We're looking for a technically skilled TPM who can lead cybersecurity compliance initiatives, with a primary focus on implementing a CMMC Level 2-equivalent program and strengthening alignment with additional frameworks such as NIST SP 800-171, ISO 27001, and similar standards. This role goes beyond coordination and documentation-you'll actively participate in building and validating security controls, drafting technical policies, and ensuring that compliance requirements translate into practical engineering outcomes.

You'll manage cross-functional efforts, maintain program structure, and coordinate stakeholders, while also contributing directly to technical deliverables. The TPM in this position will play a key part in elevating the organization's security posture and will work closely with teams across engineering, IT, operations, and compliance. The role reports to security leadership and emphasizes measurable, hands-on impact.

Key Responsibilities

• Lead CMMC Program Execution : Oversee the full lifecycle of a CMMC-style compliance initiative, from scoping and gap analysis through control rollout, assessments, and audit readiness. Support requirements related to protecting sensitive information.
• Manage Broader Framework Alignment : Coordinate compliance across multiple cybersecurity standards-including NIST, CIS Controls, or industry-specific frameworks-to maintain a unified and consistent security program.
• Produce Technical Security Artifacts : Write and review technical documentation such as system security plans, policies, procedures, POA&Ms, and architectural diagrams. Participate in testing activities, vulnerability assessments, and remediation work to ensure controls are realistically implemented.
• Program & Project Management : Build and maintain roadmaps, timelines, and resource plans. Track progress using common project management tools and run stakeholder syncs, risk reviews, and status updates.
• Cross-Functional Coordination : Partner with engineering, IT, legal, and external assessors to address technical challenges, clarify requirements, and cultivate a strong security culture. Provide hands-on technical support where needed.
• Risk & Issue Management : Identify compliance and security risks, prioritize mitigation steps, and conduct periodic assessments or simulations to validate that controls remain effective.
• Continuous Enhancement : Monitor evolving cybersecurity regulations and best practices. Recommend and drive improvements in processes, tooling, and program structure.
• Reporting & Metrics : Prepare leadership-level summaries of program status, security performance metrics, and compliance KPIs to enable data-driven decision-making.

This position includes some administrative activities (meeting facilitation, notes, scheduling), but the core focus is on technical execution and direct contribution-not just oversight.

Required Qualifications

Preferred Skills