SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 248,000 - 279,000 / annual
Discord is seeking a Staff Technical Program Manager to operate within the Security and IT organization, managing company-wide programs and accelerating execution of the team's roadmap. The Security and IT organization is responsible for protecting Discord's users, employees, and infrastructure across security engineering, detection & response, corporate IT, and governance, risk, and compliance (GRC) programs.
In this role, you will develop and drive security, IT, and compliance programs across a fast-moving, high-scrutiny environment. You'll work closely with Security Engineering, IT, Legal, Privacy, and cross-functional engineering teams to implement solutions supporting detection & response, identity & access management, and endpoint/device management.
Key responsibilities include:
- Managing multiple complex programs with competing timelines and resource needs across security, IT, and compliance stakeholders
- Developing a holistic ownership model for code, products, and programs
- Leveraging compliance expertise to build and run Security and IT programs
- Partnering with Security, IT, and GRC leadership to identify and run programs that mature the control environment (SOC 2, ISO 27001, NIST) while maintaining product velocity
- Driving programs such as BYOD/MDM, identity & access management (joiner/mover/leaver, privileged access, access reviews), and third-party/vendor risk management toward measurable, audit-ready outcomes
- Improving security for users and the company through program development and execution
- Streamlining Security Incident Management processes, including severity classification and escalation
- Presenting risk posture and program status to C-suite audiences
You will report to the Director of TPM and operate as a productive, first-principles thinker who develops strong relationships between partners.
Requirements:
- 8+ years of Technical Program/Product Management experience working with fast-paced Security, IT, or Infrastructure engineering teams
- Experience with core Security programs (Vulnerability Management, Application Security Reviews, Security Incident Response) at a similarly-sized company
- Experience working on programs related to security compliance frameworks (SOC 2, ISO 27001, NIST, PCI-DSS) at a similarly-sized company
- Worked with Engineering, Trust and Safety, Legal, and Privacy leadership to implement compliance requirements or meet regulatory needs, especially related to data protection or information security
- Experience moving technical or engineering programs from concept to completion and promoting impact using metrics, risk reduction, and audit-readiness outcomes
- Ability to break down complex challenges into workable components and make continuous progress
- Comfortable operating with executive leadership and presenting to C-suite audiences
Bonus qualifications:
- BA/BS in Computer Science, Engineering, or relevant technical experience
- Security or compliance certifications (CISSP, CISM, CIPP, CISA)
- Familiarity with security tooling ecosystems (SIEM, EDR, IAM platforms)
- Experience supporting detection & response or SOC functions (24x7 coverage models, threat intel, incident postmortems)
- Exposure to public-company readiness work (SOX/ICFR, segregation of duties, access reviews) or Internal Audit partnership
- Strong customer empathy ensuring solutions balance user trust/safety with company needs
