Security Risk, Security Programs - Technical Program Manager

Security Risk, Security Programs - Technical Program Manager

2 days ago Be among the first 25 applicants

Core Weave is The Essential Cloud for AI™. Built for pioneers by pioneers, Core Weave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, Core Weave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, Core Weave became a publicly traded company (Nasdaq: CRWV) in March 2025.

Learn more at

• Develop Risk Methodologies:
  Create and socialize system-level and enterprise-level risk assessment methodologies with clear scoring, evidence expectations, and review pathways
• Establish Risk Governance:
  Define the Cyber Risk Operating Model including roles, decision authorities, cross-functional workflows, and escalation criteria
• Create Core Artifacts:
  Develop policy, procedures, risk register templates, issue tracking frameworks, and exception/acceptance workflows
• Conduct Risk Assessments:
  Execute security risk assessments and lead Core Weave's annual enterprise-wide cybersecurity risk assessment
• Build Risk Measurement:
  Define initial Key Risk Indicators (KRIs), design the Cyber Risk Dashboard, and light up seed metrics using available telemetry
• Enable Continuous Visibility:
  Partner with Assurance Engineering to integrate risk measurement with existing telemetry pipelines and dashboards
• Drive Adoption:
  Integrate risk assessment into the Security Intake Process and embed risk practices into engineering workflows

• Bachelor’s degree in Information Security, Computer Science, or a related field, or equivalent practical experience.
• 5+ years of experience in Security Risk Management including exposure to frameworks such as NIST CSF or ISO 27001.
• Experience developing and executing risk assessment methodologies
• Strong understanding of cloud infrastructure security, system architecture, and common security controls
• Ability to work effectively with cross-functional teams including engineering, IT, compliance, and executive leadership to drive alignment and adoption
• Excellent written and verbal communication; can translate technical risk into business language and vice versa
• Strong organizational and project management skills; proven ability to manage shifting priorities with sound judgment and composure.

• Experience adapting risk management frameworks in response to evolving business, technology, and regulatory needs.
• Proven experience building and maturing security risk programs in cloud-native or highly regulated environments.
• Experience with risk measurement frameworks and Key Risk Indicators (KRIs) or Key Performance Indicators (KPIs)
• Familiarity with telemetry-based continuous monitoring and security data analytics
• Background in fast-paced, high-growth technology companies or cloud infrastructure environments
• Knowledge of compliance frameworks (SOC 2, ISO 27001, FedRAMP) and their relationship to risk management
• Experience with GRC tooling, dashboards, and workflow automation
• Understanding of NIST CSF or similar cybersecurity maturity frameworks

The base salary range for this role is $122,000 to $179,000. The starting salary will be determined based on job-related knowledge, skills, experience, and market location. We strive for both market alignment and internal equity when determining compensation. In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program (all based on eligibility).

In addition to a competitive salary, we offer a variety of benefits to support your needs, including:

• Medical, dental, and vision insurance - 100% paid for by Core Weave
• Company-paid Life Insurance
• Voluntary supplemental life insurance
• Short and long-term disability insurance
• Flexible Spending Account
• Health Savings Account
• Tuition Reimbursement
• Ability to Participate in Employee Stock Purchase Program (ESPP)
• Mental Wellness Benefits through Spring Health
• Family-Formin…