Senior Technical Program Manager, Security Risk and M&A Security

What Youll Do:

Youll partner closely with our Assurance Engineering team to build and scale the capabilities that power our security risk management function: an AI-assisted exception and risk-acceptance management workflow and a key risk indicator (KRI) dashboard both already live in pilot. This is a hands-on building role as much as an operating one. You will mature both capabilities from pilot into embedded business-as-usual process and build the operating cadence and visibility that make them stick. Alongside the build work youll run the ongoing operations of the risk program from recurring risk reviews with security leadership to the annual enterprise risk assessment. Youll also keep our M&A security integration program running in steady state. This role will report to the Security Risk Management and M&A Security Lead and sit within the Chief Information Security Officer (CISO) organization.

In this role you will:

• Mature AI-assisted security exception management from pilot to embedded business process our Assurance Engineering team builds the workflow; you own the program around it (requirements rollout adoption intake triage service-level agreements and the escalation path for past-due items) and you design the intake experience to meet engineers where they already work so the fast path is also the right path
• Take KRI dashboards from pilot to a tool leadership relies on partner with Assurance Engineering who build it; you define in partnership with domain leads what leadership needs to see and how it gets used and you own adoption and accuracy
• Run the Security Risk Management operating cadence drive periodic risk reviews with the CISO and security leadership run the annual enterprise security risk assessment and apply our security risk assessment framework to new risk intakes so risks are consistently identified assessed and routed to owners
• Own program reporting and visibility for Security Risk Management: operating cadence dashboards and executive updates
• Keep the M&A security integration program running in steady state maintain integration tracking across active acquisitions support new acquisitions through the established M&A security integration playbook and identify and execute improvements to the playbook where you find gaps
• Drive stalled work to a decision when a timeline slips escalate or push a risk-acceptance call so the blocker resolves
• Partner across teams to land cross-functional dependencies

Who You Are:

• 5 years in security or risk program operations technical program management consulting or a comparable role with a track record of owning programs end to end and driving them to a closed state
• Genuine security risk management fluency you understand how security risk gets identified assessed owned and accepted and you can hold your own with security domain experts; command of the discipline matters here more than any specific job title; experience managing program or delivery risk alone (scope schedule dependencies) is not enough for this role
• A builders mindset required for this role you build capabilities and operational process where little exists going deep into the exception data workflow logic and metrics and partnering hands-on with Assurance Engineering on what gets built without needing to write the code; you set up intake service-level agreements escalation paths and metrics then drive adoption so they stick
• A strong bias for action and sound judgment under imperfect information you prioritize and reprioritize as things shift present clear decisions and trade-offs and keep work moving instead of looping; you know when to escalate or force a risk-acceptance call when something stalls
• You use AI tools effectively to multiply your impact so a lean team delivers well beyond its size
• A real understanding of what it takes to provide ongoing visibility with clear concise communication that gives leadership a live view of risk blockers and progress
• Bachelors degree or equivalent experience

Preferred:

• Exposure to a breadth of security domains from both an M&A integration and a risk standpoint
• Credible with senior technical and non-technical stakeholders including negotiating scope and timelines
• Familiarity with governance risk and compliance (GRC) tooling KRI frameworks or exception and risk-acceptance management; a pure GRC background is not required
• Exposure to M&A security integration or post-close program management

Wondering if youre a good fit We believe in investing in our people and value candidates who can bring their own diversified experiences to our teams even if you arent a 100% skill or experience match.

Why CoreWeave

At CoreWeave we work hard have fun and move fast! Were in an exciting stage of hyper-growth that you will not want to miss out on. Were not afraid of a little chaos and were constantly learning. Our team cares deeply about how we build our product and how we work together which is represented through our core values:

• Be Curious at Your Core
• Act Like an Owner
• Empower Employees
• Deliver Best-in-Class Client Experiences
• Achieve More Together

We support and encourage an entrepreneurial outlook and independent thinking. We foster an environment that encourages collaboration and enables the development of innovative solutions to complex problems. As we get set for takeoff the organizations growth opportunities are constantly expanding. You will be surrounded by some of the best talent in the industry who will want to learn from you too. Come join us!

The base salary range for this role is $157000 to $210000. The starting salary will be determined based on job-related knowledge skills experience and market location. We strive for both market alignment and internal equity when determining addition to base salary our total rewards package includes a discretionary bonus equity awards and a comprehensive benefits program (all based on eligibility).

What We Offer

The range weve posted represents the typical compensation range for this role. To determine actual compensation we review the market rate for each candidate which can include a variety of factors. These include qualifications experience interview performance and location.

In addition to a competitive salary we offer a variety of benefits to support your needs. The benefits below reflect our US-based offerings; for roles in other locations benefits vary and are shared during the hiring process. These include:

• Medical dental and vision insurance - 100% paid for by CoreWeave
• Company-paid Life Insurance
• Voluntary supplemental life insurance
• Short and long-term disability insurance
• Flexible Spending Account
• Health Savings Account
• Tuition Reimbursement
• Ability to Participate in Employee Stock Purchase Program (ESPP)
• Mental Wellness Benefits through Spring Health
• Family-Forming support provided by Carrot
• Paid Parental Leave
• Flexible full-service childcare support with Kinside
• 401(k) with a generous employer match
• Flexible PTO
• Catered lunch each day in our office and data center locations
• A casual work environment
• A work culture focused on innovative disruption

California Applicants

California Consumer Privacy Act

Equal Opportunity & Accommodations

CoreWeave is an equal opportunity employer committed to fostering an inclusive and supportive workplace. All qualified applicants and candidates will receive consideration for employment without regard to race color religion sex disability age sexual orientation gender identity national origin veteran status or genetic information.

As part of this commitment and consistent with the Americans with Disabilities Act (ADA) CoreWeave will ensure that qualified applicants and candidates with disabilities are provided reasonable accommodations for the hiring process unless such accommodation would cause an undue hardship. If reasonable accommodation is needed please contact: .

Export Control Compliance

This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information applicant must either be (A) a U.S. person defined as a (i) U.S. citizen or national (ii) U.S. lawful permanent resident (green card holder) (iii) refugee under 8 U.S.C. 1157 or (iv) asylee under 8 U.S.C. 1158 (B) eligible to access the export controlled information without a required export authorization or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency. CoreWeave may for legitimate business reasons decline to pursue any export licensing process.