Technical Program Manager, Security & GRC - 11745

The Impact of a Technical Program Manager, Security & GRC at Coupa:

What You’ll Do

• Manage and scale multiple security programs by defining milestones, success criteria, resource allocation, progress tracking and successful on-time delivery of security and access management solutions.
• Collect business and operational requirements from internal teams, and help document business/process requirement specifications.
• Proactively identify and resolve delivery impediments, risks, and issues affecting projects, and drive automation and process improvements for the security and governance programs.
• Participate in operational security workflows, vulnerability management patching, IAM initiatives and Governance programs.
• Set up clear, concise reporting dashboards to share real-time program status reports on key metrics and KPIs directly to the Executive Leadership.
• Guide and coach engineering squads on Agile/Scrum practices to ensure sustainable and comfortable delivery paces.
• Support and facilitate evidence collection for internal and external audits/assessments (such as SOC 1 and 2, PCI, FedRAMP, and ISO 27001).
• Advocate for and implement tooling and dashboards to improve traceability and transparency across risk initiatives.

What You Will Bring to Coupa

• 5+ years of experience managing technical security, risk, or compliance projects-preferably in a SaaS environment.
• Bachelor’s degree in a technical field, cybersecurity, or equivalent experience; relevant industry certifications (e.g., CISSP, CISA, CRISC, PMP) are highly desirable.
• Expertise with Jira, Confluence, and project portfolio management tools.
• Highly organized with great attention to detail and analytical skills, follow-up, and follow-through across multiple concurrent initiatives.
• Self-starter with strong time management, prioritization, and organizational skills.
• Ability to thrive in fast-paced, evolving environments while driving structured outcomes.
• Working knowledge of Jira, Confluence, Google Workspace, Slack, and related AI capabilities.
• Excellent written and verbal communication skills, with the ability to collaborate in a globally distributed team setup.
• Strong understanding of cloud-based software (SaaS), AWS, GCP, and cybersecurity/privacy frameworks (e.g., NIST, SOC 2, ISO 27001).