Job description

Discord has a highly engaged community of millions of daily active users who use the platform for many different reasons, but there’s one thing that nearly everyone does: play video games. Discord plays a uniquely important role in the future of gaming, and we are focused on making it easier and more fun for people to hang out before, during, and after playing games. Technical Program Managers operate within the Security and IT organization and have technical knowledge that enables them to manage company-wide programs, guide cross-team projects, and accelerate the execution of a team's roadmap. Security and IT are the teams responsible for protecting Discord's users, employees, and infrastructure - spanning security engineering, detection & response, corporate IT, and the governance, risk, and compliance (GRC) programs that keep Discord audit-ready and regulator-facing. This is a Staff TPM role, reporting to the Director of TPM, responsible for developing and driving security, IT, and compliance programs across a fast-moving, high-scrutiny environment. If you are a productive, first-principles thinker who develops strong relationships between partners, we'd encourage you to apply! What you'll do Work closely with Security Engineering, IT, Legal, Privacy, and other cross-functional engineering teams to implement solutions supporting detection & response, identity & access management, and endpoint/device management Manage multiple complex programs, often with competing timelines and resource needs across security, IT, and compliance stakeholders Develop a holistic and enduring ownership model for our code, products, and programs Leverage your strong compliance-centric mindset to help build and run our Security and IT programs. Partner with Security, IT and GRC leadership to identify, develop, and run programs that mature our control environment (familiar with SOC 2, ISO 27001, NIST) while keeping pace with product velocity Drive programs such as BYOD/MDM, identity & access (joiner/mover/leaver, privileged access, access reviews), and third-party/vendor risk management toward measurable, audit-ready outcomes Partner with Security leadership to identify, develop, and run programs that improve the security of our users and company Manage multiple complex projects, often with competing timelines and resource needs Streamline our Security Incident Management processes, including severity classification and escalation What you have 8+ years of Technical Program/Product Management experience working with fast-paced Security, IT, or Infrastructure engineering teams Experienced with core Security programs (e.g., Vulnerability Management, Application Security Reviews, Security Incident Response) at a similarly-sized company Experience working on programs related to security compliance frameworks (e.g., SOC 2, ISO 27001, NIST, PCI-DSS) at a similarly-sized company Worked with Engineering, Trust and Safety, Legal, and Privacy leadership to implement compliance requirements or meet regulatory needs, especially related to data protection or information security Experience moving technical or engineering programs from concept to completion and promoting the impact using metrics, risk reduction, and audit-readiness outcomes Can break down complex challenges into workable components and make continuous progress towards solving a problem vs. trying to boil the ocean Comfortable operating in rooms with executive leadership, including presenting risk posture and program status to C-suite audiences. Bonus points A love for helping & empowering others BA/BS in Computer Science, Engineering, or relevant technical experience Security or compliance certifications (e.g., CISSP, CISM, CIPP, CISA) Familiarity with security tooling ecosystems (SIEM, EDR, IAM platforms) Experience programmatically supporting a detection & response or SOC function (24x7 coverage models, threat intel, incident postmortems) Exposure to public-company readiness work - SOX/ICFR, segregation of duties, access reviews - or Internal Audit partnership Strong customer-empathy that ensures your preferred solutions take into account both user trust/Safety and company needs The base salary range for this full-time position is listed below. This position will also be eligible for equity and benefits. Our salary ranges are determined by role and level. Within the range, individual pay is determined by additional factors, including job-related skills, experience, and relevant education or training. Please note that the compensation details listed in role postings reflect the base salary only, and do not include equity, or benefits. Base Salary $248,000 — $310,000 USD Why Discord? Discord plays a uniquely important role in the future of gaming. We're a multiplatform, multigenerational and multiplayer platform that helps people deepen their friendships around games and shared interests, and helps developers build and grow their businesses. We believe games give us a way to have fun with our favorite people, whether listening to music together or grinding in competitive matches for diamond rank. Join us in our mission! Your future is just a click away! Discord is committed to inclusion and providing reasonable accommodations during the interview process. We want you to feel set up for success, so if you are in need of reasonable accommodations, please let your recruiter know. Please see our Applicant and Candidate Privacy Policy for details regarding Discord’s collection and usage of personal information relating to the application and recruitment process by clicking HERE.

Requirements

Must-haves

Manage multiple complex programs, often with competing timelines and resource needs across security, IT, and compliance stakeholders
Develop a holistic and enduring ownership model for our code, products, and programs
Leverage your strong compliance-centric mindset to help build and run our Security and IT programs.
Partner with Security, IT and GRC leadership to identify, develop, and run programs that mature our control environment (familiar with SOC 2, ISO 27001, NIST) while keeping pace with product velocity
Drive programs such as BYOD/MDM, identity & access (joiner/mover/leaver, privileged access, access reviews), and third-party/vendor risk management toward measurable, audit-ready outcomes
Partner with Security leadership to identify, develop, and run programs that improve the security of our users and company
Manage multiple complex projects, often with competing timelines and resource needs
Streamline our Security Incident Management processes, including severity classification and escalation
What you have
8+ years of Technical Program/Product Management experience working with fast-paced Security, IT, or Infrastructure engineering teams
Experienced with core Security programs (e.g., Vulnerability Management, Application Security Reviews, Security Incident Response) at a similarly-sized company
Experience working on programs related to security compliance frameworks (e.g., SOC 2, ISO 27001, NIST, PCI-DSS) at a similarly-sized company
Worked with Engineering, Trust and Safety, Legal, and Privacy leadership to implement compliance requirements or meet regulatory needs, especially related to data protection or information security
Experience moving technical or engineering programs from concept to completion and promoting the impact using metrics, risk reduction, and audit-readiness outcomes
Can break down complex challenges into workable components and make continuous progress towards solving a problem vs. trying to boil the ocean
Comfortable operating in rooms with executive leadership, including presenting risk posture and program status to C-suite audiences.

Nice-to-haves

A love for helping & empowering others
BA/BS in Computer Science, Engineering, or relevant technical experience
Security or compliance certifications (e.g., CISSP, CISM, CIPP, CISA)
Familiarity with security tooling ecosystems (SIEM, EDR, IAM platforms)
Experience programmatically supporting a detection & response or SOC function (24x7 coverage models, threat intel, incident postmortems)
Exposure to public-company readiness work - SOX/ICFR, segregation of duties, access reviews - or Internal Audit partnership
Strong customer-empathy that ensures your preferred solutions take into account both user trust/Safety and company needs
Please see our Applicant and Candidate Privacy Policy for details regarding Discord’s collection and usage of personal information relating to the application and recruitment process by clicking HERE.

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: greenhouse
Effort: quick