Senior Security Program Manager
Upload My Resume
Drop here or click to browse · PDF, DOCX, DOC, RTF, TXT
Requirements
• 7+ years in security program management / technical program management / security operations program delivery. • Demonstrated experience running cross-functional programs across engineering and operations (scope, schedule, risks, dependencies). • Strong technical fluency in cloud/infra, identity/access, vulnerability management, security monitoring, and incident processes. • Excellent written/verbal communication with the ability to translate complex risk into clear priorities. • Experience in fintech, trading, payments, or digital assets, especially environments requiring high uptime and rapid execution. • Familiarity with security frameworks (NIST CSF, ISO 27001) and audit/assurance concepts. • Experience supporting security programs that intersect with financial integrity domains (e.g., AML/CFT awareness is a plus given Keyrock’s financial-services context). • Relevant certifications (e.g., CISM, CISSP, CISA, CRISC, PMP) or equivalent demonstrated expertise.
Responsibilities
• Program leadership & delivery • Own a portfolio of security programs (planning, resourcing, milestones, dependencies, risk/issue management, and outcomes). • Create and maintain multi-quarter roadmaps aligned to Keyrock’s business and operating model across venues and services (CEX/DEX and liquidity services). • Establish governance and operating cadence: steering meetings, status reporting, program reviews, and executive updates. • Support the CISO in delivering firmwide initiatives. • Security governance, risk, & control initiatives • Partner with Security and Engineering teams to drive key initiatives such as: access governance, secrets management, vulnerability remediation, security logging/monitoring improvements, endpoint/security baseline, and secure SDLC enablement. • Help mature control coverage and evidence for internal/external assurance needs (as applicable in a financial-services context). • Partner with the Director of GRC to support GRC and audit initiatives. • Incident readiness & operational resilience • Partner with Security Operations to improve incident preparedness through playbooks, tabletop exercises, lessons learned, and operational runbooks—ensuring security response stays effective in a high-availability trading environment. • Cross-functional influence • Act as the “glue” across technical and business stakeholders—clarifying ownership, unblocking delivery, and keeping programs moving with crisp communication. • Build lightweight, scalable processes that improve security consistency without slowing teams. • What success looks like (first 6–12 months) • A clearly prioritized security program roadmap with measurable KPIs and predictable execution. • Improved security readiness for key business areas, aligned with Keyrock’s activities (market making, OTC, options, treasury). • Higher stakeholder confidence via clear reporting, risk transparency, and consistent program delivery.