Sr. Technical Program Manager, Security Engineering

About the Role

As a Senior Technical Program Manager (TPM), Security Engineering, you will drive the planning, execution, and delivery of critical security programs and projects across Match Group's full portfolio of brands. You will partner with security domain leads across every function — AppSec, InfraSec, Platform Security, Red Team, SOC, IR, GRC, Data Security, AI/ML Security, and Digital Investigations — as well as brand engineering and product teams to ensure security initiatives land on time, within scope, and aligned with organizational priorities.

This role requires someone who combines strong technical fluency in cybersecurity with world-class program management skills. You will translate strategic security objectives into executable programs, track progress through OKRs and KPIs, and communicate status and risks to stakeholders ranging from individual engineers to executive leadership.

What You'll Do

Drive cross-functional security program execution — own the program lifecycle from initiation through delivery for initiatives that span multiple security domains and brands

Partner with security domain leads across AppSec, InfraSec, Platform Security, Red Team, SOC & IR, GRC, Data Security, AI/ML Security, and Digital Investigations to plan, scope, and deliver key projects

Manage and report on OKRs and KPIs — track progress against security objectives across the portfolio, identify risks early, and escalate blockers

Serve as a liaison between MG Security teams and brand leadership (Tinder, Hinge, E&E, HPCNT, Eureka, New Bets) — ensuring consistent adoption of security standards, tooling, and best practices across brands

Coordinate annual security assessments — work with third-party assessors and external penetration testers for evaluations of security posture across brands

Facilitate IR tabletop exercises — collaborate with the IR and SOC teams to plan and execute annual incident response exercises (technical, management, and executive levels)

Manage security maturity assessments — assess brand security maturity and gaps, develop improvement plans, and track progress toward maturity goals

Manage external security scoring — track and drive improvement of the organization's BitSight score, coordinating vulnerability remediation across brands

Support vendor security program coordination — work with the GRC team to track vendor security assessments, onboarding, and recertification workflows

Provide project management support to internal security teams — establishing best practices for planning, execution, and delivery of security-related projects

Create and maintain program documentation — dashboards, status reports, risk registers, and executive briefings that communicate security posture and program progress

Manage the Security Mentorship program and support career growth initiatives within the security organization

What You'll Bring

5+ years of experience in technical program management, security program management, or a related role within a technology or security organization
Strong technical fluency in cybersecurity — understanding of security operations, application security, infrastructure security, cloud security (AWS, GCP), and datacenter environments
Proven ability to manage complex, cross-functional programs involving multiple teams, brands, or business units simultaneously
Experience with security maturity frameworks and assessing organizational security posture
Strong stakeholder management skills — ability to communicate effectively with deeply technical security engineers, brand engineering teams, and senior business leadership
Experience with project management tools and methodologies (Jira, Agile, OKR frameworks)
Excellent data-driven decision making — ability to build dashboards, track KPIs, and present insights to drive action
Outstanding written and verbal communication skills, including experience creating executive-level presentations and reports
Self-starter who thrives in a fast-paced, ambiguous environment with competing priorities

Nice to Have

Experience in a multi-brand or multi-business-unit security organization
Background in the consumer internet, dating, or social platform industry
Familiarity with GRC tooling (OneTrust, Monday.com, or similar)
Experience coordinating third-party penetration tests and red team engagements
Familiarity with AI governance programs and emerging AI security standards (NIST AI RMF, ISO 42001, OWASP AI)
Experience managing BitSight or other external security rating platforms
Relevant certifications: PMP, CISSP, CISM, CRISC, or equivalent

• Take the Lead: We don't ghost our work or each other. Just as users don't leave their matches hanging, we don't let each other down.
• Move Fast: We have a bias for action and urgency. Something that could be done tomorrow would be better if done today.
• Better Together: We keep connection at the heart of dating and at the heart of how we work. Just as our users are better when they connect with others, so are we when we collaborate.
• Real Talk: We say the hard thing the human way. Just as we ask our users to behave with kindness and candor in our community, we expect all of us to do the same.
• Safety First: We act with integrity, transparency, and consistency so people feel safe—whether they're swiping, matching, or working alongside us.
• Spark Fun: We have fun to unlock creativity, fuel innovation, and help us build better experiences for daters.