Security Risk, Security Programs - Technical Program Manager

Security Risk, Security Programs – Technical Program Manager

Join to apply for the Security Risk, Security Programs – Technical Program Manager role at Core Weave
.

Core Weave is The Essential Cloud for AI™. Built for pioneers by pioneers, Core Weave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence.

• Develop Risk Methodologies:
  Create and socialize system-level and enterprise-level risk assessment methodologies with clear scoring, evidence expectations, and review pathways.
• Establish Risk Governance:
  Define the Cyber Risk Operating Model including roles, decision authorities, cross-functional workflows, and escalation criteria.
• Create Core Artifacts:
  Develop policy, procedures, risk register templates, issue tracking frameworks, and exception/acceptance workflows.
• Conduct Risk Assessments:
  Execute security risk assessments and lead Core Weave's annual enterprise-wide cybersecurity risk assessment.
• Build Risk Measurement:
  Define initial Key Risk Indicators (KRIs), design the Cyber Risk Dashboard, and light up seed metrics using available telemetry.
• Enable Continuous Visibility:
  Partner with Assurance Engineering to integrate risk measurement with existing telemetry pipelines and dashboards.
• Drive Adoption:
  Integrate risk assessment into the Security Intake Process and embed risk practices into engineering workflows.

• Bachelor’s degree in Information Security, Computer Science, or a related field, or equivalent practical experience.
• 5+ years of experience in Security Risk Management including exposure to frameworks such as NIST CSF or ISO 27001.
• Experience developing and executing risk assessment methodologies.
• Strong understanding of cloud infrastructure security, system architecture, and common security controls.
• Ability to work effectively with cross-functional teams including engineering, IT, compliance, and executive leadership to drive alignment and adoption.
• Excellent written and verbal communication; can translate technical risk into business language and vice versa.
• Strong organizational and project management skills; proven ability to manage shifting priorities with sound judgment and composure.

• Experience adapting risk management frameworks in response to evolving business, technology, and regulatory needs.
• Proven experience building and maturing security risk programs in cloud-native or highly regulated environments.
• Experience with risk measurement frameworks and Key Risk Indicators (KRIs) or Key Performance Indicators (KPIs).
• Familiarity with telemetry-based continuous monitoring and security data analytics.
• Background in fast-paced, high-growth technology companies or cloud infrastructure environments.
• Knowledge of compliance frameworks (SOC 2, ISO 27001, FedRAMP) and their relationship to risk management.
• Experience with GRC tooling, dashboards, and workflow automation.
• Understanding of NIST CSF or similar cybersecurity maturity frameworks.

The base salary range for this role is $122,000 to $179,000. The starting salary will be determined based on job‑related knowledge, skills, experience, and market location. In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program.

Benefits include:

• Medical, dental, and vision insurance – 100% paid by Core Weave.
• Company‑paid life insurance.
• Voluntary supplemental life insurance.
• Short‑ and long‑term disability insurance.
• Flexible Spending Account.
• Health Savings Account.
• Tuition reimbursement.
• Participation in Employee Stock Purchase Program (ESPP).
• Mental wellness benefits via Spring Health.
• Family‑forming support via Carrot.
• Paid parental leave.
• Full‑service childcare support with Kinside.
• 401(k) with generous employer match.
• Flexible PTO.
• Catered lunch each day at office and data center locations.
• A casual work environment.
• A work culture focused on innovative disruption.

While we prioritize a hybrid work environment, remote work may be considered for candidates located more than 30 miles from an office, based on role requirements. New hires will be…