Principal Program Manager

**Job Description** We are vigorously investing in Oracle Cloud to provide the broadest, most secure cloud in the industry. Oracle offers a suite of integrated services, including applications as a service, platform as a service, and infrastructure as a service, which eliminate the data and business process fragmentation which comes with cloud silos. This is your opportunity to be part of the exciting Cloud Security team that is responsible for protecting Oracle's infrastructure and keeping customer workloads safe. Oracle's mission is to provide customers with best-in-class compute, storage, networking, database, security, and an ever-expanding set of foundational cloud-based security services. We are rapidly expanding the size and scale of our business and are looking for highly talented individuals to join our team. As a vital member of Oracle Cloud Infrastructure's (OCI) Security Operations Organization, you will be at the forefront of protecting Oracle's cloud and enterprise environments from both external adversaries and insider threats. As our team continues to expand and tackle ambitious initiatives, we are seeking experienced security professionals with a proven track record in safeguarding critical infrastructure and data. Our rapidly growing team specializes in threat hunting, analyzing indicators of compromise (IOCs), investigating security incidents, managing incident responses, and conducting digital forensics across IaaS, PaaS, and SaaS platforms. In this role, you will be part of a dedicated security operations team, helping to coordinate the buildout of data loss prevention tools and automations to detect and respond to security threats in real time and support program operations and processes. **The Role** We are seeking an experienced Security Technical Program Manager who is proactive, results-driven, and committed to delivering outcomes to join Oracle's Insider Risk Management/Data Loss Prevention team. The ideal candidate demonstrates strong ownership and accountability, consistently operates with an exceptionally high degree of integrity, and proven track record of ethical leadership and sound judgment. The successful candidate will have extensive experience engaging with senior security and technology leaders, as well as their operations teams. You should possess a strong background in program management within technological environments, with a track record of coordinating and delivering large-scale, security-focused initiatives. The ideal candidate will delve into technical topics and be able to translate those topics and to both non-technical and technical audiences inside of Oracle. Exceptional communication, writing, and briefing skills, meticulous attention to detail, and the ability to translate data into actionable metrics are crucial for success in this role. You will lead the planning, coordination, and driving the execution across a variety of security projects and will support tracking of all KTLO activities. Projects will include tool acquisition and implementation, policy development, process development, automation of analytics and reporting, and establishment of case management tools and related workflows/processes. The ideal candidate will have proven experience in developing and tracking meaningful OKRs that reflect the health and maturity of security domains. You will collaborate closely with partner security teams (such as SOC, digital forensics, incident response, physical security, and engineering) and work cross-functionally with senior leaders from HR, Legal, crisis management, compliance, and other business units during security-related investigations. **Responsibilities** + **Program & Project Management** : Plan, scope and coordinate multiple complex, cybersecurity initiatives, ensuring effective prioritization, resource allocation, and execution within defined timelines. + **Metrics & Performance Tracking** : Develop and implement value-based metrics to measure the effectiveness of the cybersecurity program, continuously refining KPIs to drive business impact. + **Process Design & Optimization** : Architect, implement, and enhance security-related business processes to improve efficiency, scalability, and compliance. + **Business Operations Execution** : Drive critical business operations activities, including workforce planning, efficiency tracking, capacity management, and executive reporting on Key Performance Indicators (KPIs) and Objectives and Key Results (OKRs). + **Data-Driven Decision Making** : Analyze and interpret complex datasets using Excel, Power BI, Python, or other analytics tools to identify trends, generate insights, and provide actionable recommendations to leadership. + **Cross-Functional Communication** : Facilitate clear, concise communication across teams, ensuring alignment on key priorities and enabling effective decision-making at all levels. + **Executive Reporting & Presentations** : Develop high-impact reports, dashboards, and presentations tailored for senior leadership, ensuring clarity, professionalism, and strategic insight. + **Strategic Planning & Execution** : Define project requirements, establish roadmaps, and manage execution for complex cybersecurity programs, balancing long-term strategy with immediate business needs. + **Issue & Risk Management** : Identify, assess, and mitigate program risks and blockers, ensuring continued progress toward cybersecurity and operational goals. + **Continuous Improvement & Agility** : Maintain a bias for action, iterating and refining processes to enhance efficiency, reduce operational bottlenecks, and support evolving business needs. + **Knowledge Management** : Create and maintain structured documentation, templates, and operational artifacts to support collaboration and knowledge sharing. + **Security Program Oversight** : Oversee multiple security initiatives, ensuring alignment with organizational security objectives and compliance requirements. + **Problem Solving & Critical Thinking** : Leverage data-driven methodologies to solve complex business and technical challenges, optimizing cybersecurity operations for effectiveness and efficiency. **_Preferred Qualifications_** **Program & Process Management** + 7-10 years of experience in technical and/or business program management, preferably in cybersecurity, compliance, or cloud services. + Experience with Agile frameworks, including managing key team processes such as stand-ups and scrums. + Project Management Professional (PMP) certification or equivalent industry certification preferred. + Proven ability to navigate ambiguity in fast-paced, dynamic environments with adaptability and resilience. + Experience in collaborative, event-driven operations, working effectively within cross-functional teams. **Cybersecurity & Technical Expertise** + Direct experience in cybersecurity or compliance with a technology or cloud service provider. Ideally in Security Operations functions (i.e. DLP, Insider RM, Security Incident Response, Threat Intel, SOC, TVM, etc...) + Strong understanding of the interrelationship background and purpose of key security functions across an end-to-end cybersecurity organization. + Ability to translate technical concepts into business insights, ensuring effective communication with non-technical stakeholders. **Leadership & Communication** + Exceptional communication skills, with the ability to convey complex information clearly to technical and non-technical audiences. + Strong executive presence, capable of engaging and influencing senior leadership. + Active listening and critical thinking skills, enabling rapid assessment of situations to determine criticality and scope. + Meticulous attention to detail, ensuring accuracy and precision in program execution. **Financial & Procurement Oversight** + Experience in budget management, financial reporting, and data analysis, ensuring operational efficiency and cost control. + Experience working with procurement teams **Data Analytics & Automation** + Experience with scripting or coding languages for data analytics, such as SQL (data querying), DAX (Power BI), Python, Tableau, Stata, or R, to enhance reporting, automate processes, and perform custom analyses. **U.S. Government - Security Clearance** + Active TS/SCI Full-Scope Polygraph or CI Polygraph or ability to obtain federal clearance preferred ( **not** a hard and fast requirement). Disclaimer: **Certain U.S. based or U.S. customer or client-facing roles may be required to comply with applicable requirements, such as immunization/occupational health mandates, and/or drug testing requirements.** **Range and benefit information provided in this posting are specific to the stated locations only** US: Hiring Range in USD from: $90,100 to $209,500 per annum. May be eligible for bonus and equity. Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle's differing products, industries and lines of business. Candidates are typically placed into the range based on the preceding factors as well as internal peer equity. Oracle US offers a comprehensive benefits package which includes the following: 1. Medical, dental, and vision insurance, including expert medical opinion 2. Short term disability and long term disability 3. Life insurance and AD&D 4. Supplemental life insurance (Employee/Spouse/Child) 5. Health care and dependent care Flexible Spending Accounts 6. Pre-tax commuter and parking benefits 7. 401(k) Savings and Investment Plan with company match 8. Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation. 9. 11 paid holidays 10. Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours. 11. Paid parental leave 12. Adoption assistance 13. Employee Stock Purchase Plan 14. Financial planning and group legal 15. Voluntary benefits including auto, homeowner and pet insurance The role will generally accept applications for at least three calendar days from the posting date or as long as the job remains posted. Career Level - IC4 **About Us** Only Oracle brings together the data, infrastructure, applications, and expertise to power everything from industry innovations to life-saving care. And with AI embedded across our products and services, we help customers turn that promise into a better future for all. Discover your potential at a company leading the way in AI and cloud solutions that impact billions of lives. True innovation starts when everyone is empowered to contribute. That's why we're committed to growing a workforce that promotes opportunities for all with competitive benefits that support our people with flexible medical, life insurance, and retirement options. We also encourage employees to give back to their communities through our volunteer programs. We're committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by emailing View email address on click.appcast.io or by calling View phone number on click.appcast.io in the United States. Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans' status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.