Senior InfoSec TPM: Modernization & Risk Roadmap

Requirements

• 10+ years of experience in engineering, technical program management, or security operations, with a BS or MS in engineering or computer science
,
• Deep technical InfoSec expertise, with the ability to lead architecture discussions and align programs to NIST, MITRE frameworks
,
• Proven risk-averse program delivery across complex, cross-functional security environments
,
• Agile fluency across Scrum and Kanban, with a track record of unblocking engineering teams and maintaining velocity
,
• Proficiency in Jira, ServiceNow, and Confluence for tracking resources, velocity, and program health
,
• (Desirable) Security certification such as CISSP, CISM, or SANS equivalent
,
• (Desirable) Proven cross-functional leadership with strong references highlighting trusted relationships across senior leaders and engineering teams
,
• (Desirable) Ability to maintain strategic clarity and tailor concise, well-structured communications to any audience
,
• You do not need to match every listed expectation to apply for this position. Here at Zoox, we know that diverse perspectives foster the innovation we need to be successful, and we are committed to building a team that encompasses a variety of backgrounds, experiences, and skills

What the job involves

• The Senior Technical Program Manager will serve as the primary driver for Zoox's Information Security modernization roadmap
,
• As a TPM, you will work cross-functionally with leaders across infosec, product security, platform/cloud engineering, machine learning software teams, and vehicle engineering to execute a massive architectural transformation
,
• You will ensure our security initiatives align with the fast-moving nature of autonomous driving development, emphasizing agility, frictionless access, and iterative progress
,
• Our InfoSec team is redefining how security operates at Zoox, moving from reactive compliance to proactive engineering enablement
,
• You will manage the programmatic delivery of our four core pillars: Cloud Data Governance, Identity & Zero Trust, Cyber Resilience, and Security Culture. From deploying advanced infosec programs to operationalizing Risk-Based Vulnerability Management and governance guardrails, you will own the critical path
,
• We need a TPM who can seamlessly translate technical debt into business risk for executives, while simultaneously defining clear security program roadmaps
,
• Drive program strategy and execution by translating corporate security strategy into roadmap backlogs, managing agile ceremonies, and aligning InfoSec with Product, Software, and IT teams
,
• Own stakeholder communication by maintaining metrics dashboards, drafting Board-level decks using a Problem → Solution → Business Value narrative, and reporting program progress and ROI
,
• Manage resources and financials in partnership with cross-functional leaders and finance, tracking headcount and budget to keep the program appropriately staffed and funded
,
• Facilitate clear decision-making by setting meeting agendas, eliminating bottlenecks, and ensuring delivery teams have unambiguous direction at all times
,
• Develop and maintain program documentation, including process flows, SLAs, acceptable use policies, and company-wide communications