Job description

As a Security Engineering Program Management leader in ASE, you are both a people leader and a functional expert in security risk and vulnerability management at scale. While working directly with ASE's Risk & Vulnerability Management team, security engineering, and service owners across Apple, you and your team will turn risk and vulnerability data into prioritized, well-run programs that measurably reduce risk. This will include scaling the Vulnerability Management program, driving remediation efforts across the organization, managing the delivery of security controls, guardrails, and frameworks that help protect our customers' data in Apple's infrastructure, and giving leadership clear visibility into our risk posture. This is a hands-on leadership role: you will stay close to the details of your programs while growing a team of program managers and shaping how security risk work gets done across ASE. You and your team will be responsible for identifying, planning, and delivering program security outcomes by engaging a broad set of internal and external stakeholders. 8+ years of experience in technical program management, including 4+ years managing projects or programs in the field of security, OR a combination of 4+ years of program management and 4+ years in a related field such as security engineering, vulnerability management, risk management, or engineering leadership. 3+ years of experience managing people, such as a team of program managers, engineers, or other technical professionals. People Leadership: Experience hiring, coaching, and developing team members at different stages of their careers. Project Management: Proficiency in managing complex projects, including defining scopes, setting timelines, and coordinating cross-functional teams to ensure timely and successful delivery. Risk Management Skills: Ability to use data to identify, assess, and prioritize security risks, and to communicate appropriate mitigation strategies to protect organizational assets. Technical Proficiency: A solid understanding of software development, systems engineering, or related technical fields to effectively oversee vulnerability management and remediation programs. Education: BS in Computer Science, Computer Engineering or other technical field or equivalent industry experience Build Trust and Influence: Experience fostering collaboration and influencing stakeholders without direct authority to achieve program objectives. Communication Skills: Ability to convey complex technical information to both technical and non technical audiences, including executive and senior leadership, with clarity, confidence, and alignment. Drive What Matters: Able to focus and simplify, balancing the details with goals, priorities, and trade-offs in mind. Experience building or scaling a vulnerability management or security risk management program. Familiarity with vulnerability prioritization and risk assessment practices, such as CVSS or similar scoring approaches. Experience with cloud security. Experience using data visualization tools such as Tableau to report on program health and risk posture. Familiarity with applying AI tools to program management or security workflows. Experience in talent development, succession planning, or organizational design. Industry certifications in security or risk management (e.g., CISSP, CISM, CRISC), or equivalent experience.

Requirements

Must-haves

3+ years of experience managing people, such as a team of program managers, engineers, or other technical professionals.
People Leadership: Experience hiring, coaching, and developing team members at different stages of their careers.
Project Management: Proficiency in managing complex projects, including defining scopes, setting timelines, and coordinating cross-functional teams to ensure timely and successful delivery.
Risk Management Skills: Ability to use data to identify, assess, and prioritize security risks, and to communicate appropriate mitigation strategies to protect organizational assets.
Technical Proficiency: A solid understanding of software development, systems engineering, or related technical fields to effectively oversee vulnerability management and remediation programs.
Education: BS in Computer Science, Computer Engineering or other technical field or equivalent industry experience
Build Trust and Influence: Experience fostering collaboration and influencing stakeholders without direct authority to achieve program objectives.
Communication Skills: Ability to convey complex technical information to both technical and non technical audiences, including executive and senior leadership, with clarity, confidence, and alignment.
Drive What Matters: Able to focus and simplify, balancing the details with goals, priorities, and trade-offs in mind.
Experience building or scaling a vulnerability management or security risk management program.
Familiarity with vulnerability prioritization and risk assessment practices, such as CVSS or similar scoring approaches.
Experience with cloud security.
Experience using data visualization tools such as Tableau to report on program health and risk posture.
Familiarity with applying AI tools to program management or security workflows.
Experience in talent development, succession planning, or organizational design.
Industry certifications in security or risk management (e.g., CISSP, CISM, CRISC), or equivalent experience.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: apple
Effort: medium