Security Technical Program Manager

Are you ready to trade your job for a journey? Become a Fly Mate!

Passion, excitement & global collaboration are all core to what it means to be a Fly Mate. At Flywire, we’re on a mission to deliver the world’s most important and complex payments. We use our Flywire Advantage - the combination of our next-gen payments platform, proprietary payment network and vertical specific software, to help our clients get paid, and help their customers pay with ease - no matter where they are in the world.

What more do we need to truly be unstoppable? Perhaps, that is you!

Who we are: Flywire is a global payments enablement and software company, founded a decade ago to solve high-stakes, high-value payments in education, using modern technology.

Today, we’ve digitized payments for more than 3,300+ global clients across education, healthcare, travel & B2B, covering more than 240 countries and territories and supporting over 140 currencies. And, we’re just getting started!

With over 1000+ global Fly Mates, representing more than 40 nationalities, and in 14 offices world-wide, we’re looking for Fly Mates to join the next stage of our journey as we continue to grow.

The Opportunity

As a Security Technical Program Manager
, you will be the connective tissue between our Product and Engineering teams, ensuring security isn't just a checkpoint, but a foundational pillar of our cloud and AI ecosystems.

We are looking for a leader who can translate complex threat landscapes into high-impact, actionable roadmaps, balancing rigorous program management with deep technical empathy
. You won't just manage tasks; you will architect the execution of our security vision.

Key Responsibilities

Security Architecture & Design: Lead high-stakes Security Design Reviews, embedding Secure-SDLC principles from the first line of code to global deployment.

Vulnerability Governance: Orchestrate the end-to-end threat lifecycle, partnering with SRE, Dev Ops, and Engineering to turn risk data into rapid, automated remediation.

Compliance & Trust: Champion our commitment to PCI DSS, SOX, and SOC2
, while navigating the complexities of global regulations like GDPR and HIPAA
.

Strategic Execution: Define the "Security North Star," establishing clear success metrics (KPIs/KRIs) and reporting progress directly to executive leadership.

Velocity & Security: Partner with development teams to integrate best practices that enhance—rather than hinder—development velocity
, proving that "secure" and "fast" can coexist.

Program Operations: Transform abstract security ideas into structured project charters with clear roles, timelines, and a definitive "Definition of Done."

What We’re Looking For

Experience: 6+ years in Technical Program Management, specifically focused on Information Security, Application Security, or Cyber Risk.

Compliance Mastery: A proven track record of managing and delivering audits for PCI, SOC2, and SOX
.

Technical Depth: You "speak engineer." You have a deep understanding of the OWASP Top 10
, Cloud environments (
AWS, GCP, or Azure
), and modern vulnerability management tools.

Execution Excellence: The ability to orchestrate multiple high-stakes projects simultaneously across different time zones and functions without losing momentum.

Strategic Communication: Exceptional ability to translate complex technical vulnerabilities or compliance hurdles into concise, actionable plans for non-technical stakeholders.

Crisis Leadership: Resilience in high-pressure scenarios, with the judgment to make informed decisions during security incidents or tight launch windows.

Influence: A natural ability to motivate and influence cross-functional teams and seniority levels without direct authority.

Education: Bachelor's or Master's degree in Cybersecurity, Computer Science, or a related technical field.

Desired Certifications & Proficiencies

Security & Compliance: CISSP, CISM, or CCSK.

Audit Focused: CISA (particularly valuable for our SOX and SOC2 requirements).

Program Management: PMP or Agile/Scrum Master certifications.

Tooling: Familiarity with GRC platforms (e.g.,
Vanta, Drata
), vulnerability scanners (e.g.,
Nessus, Snyk
), and CSPM tools.