Senior Program Manager, Security Engineering

Are you fascinated by what it takes to secure the digital backbone of modern enterprises? At Kong, we are rapidly building the future of API management and connectivity, and ensuring a robust, impenetrable security posture is absolutely paramount to our mission. We are searching for an exceptional Senior Program Manager, Security Engineering, to join our team. This role is perfect for someone with a unique blend of technical acumen, strong program leadership, and a deep passion for cybersecurity. We recognize that no one person checks every single box on a job description. If you believe you bring significant strengths in a few key areas and possess a genuine eagerness to grow in others, we warmly invite you to submit your application.

Overview

We are seeking a dynamic, well-rounded Senior Technical Program Manager to become a vital part of our Cybersecurity team, located within the Office of the Chief Information Security Officer (OCISO) at Kong. This fully remote, worldwide opportunity offers the chance to support a broad spectrum of critical cybersecurity initiatives across the entire Kong ecosystem. You will dive into everything from pioneering risk management and compliance automation efforts to enhancing our security operations and driving technical delivery programs. You will find yourself working at the intersection of security best practices and innovative technology, making a tangible impact on our global infrastructure.

Key Responsibilities

Lead and manage Kong's core Cybersecurity Programs across the OCISO, ensuring alignment with organizational goals and strategic objectives.
Establish, develop, and meticulously track key performance indicators (KPIs) and metrics to measure program effectiveness, progress, and overall security posture.
Collaborate closely with engineering, product, and various business stakeholders. Together, you will define, prioritize, and drive the execution of essential cybersecurity initiatives.
Oversee the successful technical delivery of security projects, from concept to deployment, ensuring they meet robust security standards and business requirements.
Drive advancements in risk management processes and compliance automation, identifying opportunities to streamline operations and enhance our defensive capabilities.
Develop comprehensive program plans, manage timelines, allocate resources effectively, and proactively identify and mitigate risks.
Champion a security-first culture by fostering strong relationships and communicating complex security concepts clearly to diverse audiences.

Requirements

Demonstrated experience working within an Information Security or Cybersecurity team, ideally in a technical program management capacity.
A strong understanding of modern security frameworks, including NIST, ISO 27001, SOC 2, and their practical application.
Proven expertise in risk management methodologies and technical program delivery in a fast-paced environment.
Exceptional collaboration and communication skills, with the ability to influence stakeholders at all levels.
Ability to manage multiple complex projects simultaneously, prioritizing effectively and adapting to evolving threats and business needs.
While not strictly required, certifications such as CISSP, CISM, PMP, or equivalent are highly desirable and will set you apart.

What You'll Gain

The opportunity to make a significant, company-wide impact on the security posture of a rapidly growing, cutting-edge technology company.
A fully remote, flexible work environment that values autonomy and work-life balance, allowing you to contribute from anywhere in the world.
Work alongside a talented and passionate team of security professionals dedicated to innovation and continuous improvement.
Exposure to a wide array of cybersecurity challenges and technologies, fostering continuous professional development and growth.
A culture that encourages intellectual curiosity, supports learning, and celebrates success.