Sr. Technical Program Mgr, Security Policy & Governance

Company Description

xcelForce is hiring for a Fortune 100 technology company HQ in Silicon Valley whose products are used by millions of people around the world every day. Our client is an innovator across multiple industries, building and delivering services on the latest AI capabilities at a global scale, and it expects its teams to work with those tools too. You will work alongside exceptional people in an environment that moves fast, sets a high bar, and has fun doing it. If you want to do serious work with some of the best in the industry, this is the place to do it.

Role Description

The Sr. Technical Program Manager, Security Policy & Governance is a 12-month contract role with potential extension, placed by xcelForce with a Fortune 100 technology company. The role works Pacific Time business hours and starts immediately. Compensation is based on experience.

The client’s security organization needs its policy portfolio to be brought up to date and a repeatable process for keeping it that way. The deliverables below are the first ones needed. More policy and governance work of the same kind will follow over the term.

• A prioritized assessment of the existing policy portfolio, identifying what to revise, replace, retire, or retain
• Separate templates for policies, standards, and procedures, covering ownership, version, approval, review date, scope, and framework references
• 50 authored or revised documents, each with clear requirements, consistent terminology, an accountable owner, and a current review date, reviewed by stakeholders and ready for client approval
• A mapping of every completed document to the client’s required security frameworks, with coverage gaps highlighted
• A documented policy lifecycle covering review, approval, version control, exceptions, and retirement, plus an annual review calendar and a portfolio change log
• Two review cycles (one you lead, one the client’s team leads with your support) and two handover sessions, leaving the internal team able to maintain the portfolio
• Agreed measures, set with the client’s team, showing the policies are adopted and effective in practice

This is a fast-paced environment with high expectations. Senior stakeholders review the work, feedback is direct, and you will be expected to act on it quickly. In keeping with how xcelForce works, you will use LLM tools and automation to move faster.

Qualifications

Required:

10+ years as a Technical Program Manager or equivalent at a large-scale technology company

Bachelor of Science degree in a technical field

Has personally written policies, standards, or procedures

Uses LLM tools in real work to draft, review, and build automations, and can show an example

Record of driving senior stakeholders to sign-off on tight deadlines

Takes direct feedback and adjusts quickly

Able to work Pacific Time business hours

Available to start immediately

Preferred:

Prior contract or consulting engagements with a formal handover to an internal team

PMP, PgMP Certification

CISSP, CISM, CISA, CRISC, or ISO 27001 Lead Implementer/Auditor

Experience with GRC tooling, such as ServiceNow GRC, Archer, or OneTrust

Has mapped policies or controls to at least one major security framework, such as ISO 27001, SOC 2, NIST CSF, or PCI DSS

Experience supporting external security audits

This is a remote job, but preferred if the person has the ability to commute to Seattle, WA frequently.