Security Technical Program Manager

About the Role:

Gusto is becoming an AI-native company, and that only works if our security posture keeps pace. As the Security TPM, you'll own the definition and delivery of Gusto's vulnerability management and security operations programs across Security, AIT, R&D, Infrastructure, GRC, and Risk.

Responsibilities:

• Set the strategy and roadmap for vulnerability management and security operations
• Define what good vulnerability management and security operations look like for an AI-first business
• Run intake and prioritization with senior stakeholders
• Decide where security should clear the way for AI speed and where it needs to hold the line
• Put AI plugins to work to pull together stakeholder input and keep the roadmap grounded

Day-to-Day Tasks:

• Lead delivery of the centralized vulnerability management program
• Lead security operations delivery
• Stand up daily security-health and vulnerability-management metrics dashboards
• Build security workflows that run on AI plugins by default
• Manage stakeholders and vendors

Requirements:

• A history of taking programs from ambiguous to shipped in regulated environments
• 5 to 8+ years leading cross-functional TPM or delivery work
• Solid handle on vulnerability management and security operations
• Experience working with AI plugins to drive delivery
• Ability to speak the language of security engineering, infrastructure, GRC, and R&D

Nice to Have:

• Familiarity with modern security stack
• Hands-on experience using AI clients and plugins
• Working knowledge of control frameworks like SOC 1/2 and ISO 27001
• PM certification and experience in high-growth fintech or regulated industries

Benefits:

• Competitive base pay
• Benefits
• Equity (RSUs)
• Physical office spaces in Denver, San Francisco, and New York City
• Flexible work arrangements