Job description

Working at Atlassian Atlassians can choose where they work – whether in an office, from home, or a combination of the two. That way, Atlassians have more control over supporting their family, personal goals, and other priorities. We can hire people in any country where we have a legal entity. • Own portfolio-level trust outcomes: Set strategic direction and drive a multi-year portfolio across Security, Compliance, GRC and Privacy, tying company priorities to clear executive decisions • Lead cross-functional delivery: Orchestrate execution across Trust Engineering, Product, Platform, Legal, GRC, and IT, managing dependencies, technical risks, and organizational trade-offs • Drive secure-by-default engineering : Lead initiatives to embed automated security controls, trusted AI-native SDLC, software supply chain defenses, and continuous vulnerability monitoring into developer workflows • Enable regulated market access : Drive technical readiness and authorizations to operate in regulated environments (such as FedRAMP and regional certifications) to meet market commitments • Turn ambiguity into clarity: Structure complex technical and governance challenges, establish effective decision forums, and align cross-functional leaders • Influence executive leadership : Partner closely with C-level executives, providing fact-based risk insights, escalating blockers, and driving critical decisions to closure • Establish durable mechanisms : Build scalable frameworks for risk prioritization, dependency management, compliance evidence pipelines, and security reviews • Measure impact and risk reduction : Define metrics to track security posture improvements, vulnerability reduction, audit readiness, and overall business value Qualifications • 12+ years of experience in technical program management, engineering leadership, or security architecture in large cloud or SaaS environments • Proven portfolio-level scope leading multi-team, company-wide security, infrastructure or compliance initiatives over multiple years • Deep domain knowledge across cybersecurity, risk management, cloud security architecture, threat modeling, AI-native SDLC, vulnerability management, and GRC frameworks • Proven delivery of complex technical transformations such as software supply chain security, automated security controls, identity governance or authorizations to operate in regulated environments • Strong executive communication, synthesizing complex technical, legal, and risk scenarios into clear trade-offs and decisions • Ability to influence and align engineering, product, legal, and GRC teams without direct authority • Systems thinking with experience designing and scaling operational frameworks, governance rhythms, and dependency tracking globally • Data-driven decision making using telemetry and risk metrics to guide trade-offs and demonstrate measurable risk reduction • Bachelor’s degree in Computer Science, Information Security, Engineering, Business, or equivalent practical experience Preferred qualifications • Experience with AI security, trusted AI deployments, adversarial threat defense, or security automation in cloud-native environments • Direct experience leading FedRAMP, DoD IL4/IL5, SOC 2, ISO 27001, or major privacy compliance programs at enterprise scale • Experience scaling software supply chain security, including SBOMs, artifact provenance, and package hardening • Experience partnering directly with C-level executives, CISO, CTrO, and senior engineering leaders in high-stakes environments • Proven track record of building and scaling TPM operating models or communities of practice across engineering organizations • Background in data analytics and security telemetry, translating complex data into actionable leadership insights Benefits & Perks Atlassian offers a wide range of perks and benefits designed to support you, your family and to help you engage with your local community. Our offerings include health and wellbeing resources, paid volunteer days, and so much more. To learn more, visit go.atlassian.com/perksandbenefits . About Atlassian At Atlassian, we're motivated by a common goal: to unleash the potential of every team. Our software products help teams all over the planet and our solutions are designed for all types of work. Team collaboration through our tools makes what may be impossible alone, possible together. We believe that the unique contributions of all Atlassians create our success. To ensure that our products and culture continue to incorporate everyone's perspectives and experience, we never discriminate based on race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status. All your information will be kept confidential according to EEO guidelines. To provide you the best experience, we can support with accommodations or adjustments at any stage of the recruitment process. Simply inform our Recruitment team during your conversation with them. To learn more about our culture and hiring process, visit go.atlassian.com/crh . In line with local law, identity verification (which may include use of biometric data) is a condition of employment with Atlassian for employment fraud purposes. At Atlassian, we strive to design equitable, explainable, and competitive compensation programs. We follow consistent hiring practices and account for each candidate's skills, knowledge, and experience when setting base pay within the range. Please visit go.atlassian.com/payzones for more information on which locations are included in each of our geographic pay zones. However, please confirm the zone for your specific location with your recruiter. This role may also be eligible for benefits, bonuses, commissions, and equity.

Requirements

Must-haves

Working at Atlassian
Own portfolio-level trust outcomes: Set strategic direction and drive a multi-year portfolio across Security, Compliance, GRC and Privacy, tying company priorities to clear executive decisions
Lead cross-functional delivery: Orchestrate execution across Trust Engineering, Product, Platform, Legal, GRC, and IT, managing dependencies, technical risks, and organizational trade-offs
Drive secure-by-default engineering : Lead initiatives to embed automated security controls, trusted AI-native SDLC, software supply chain defenses, and continuous vulnerability monitoring into developer workflows
Enable regulated market access : Drive technical readiness and authorizations to operate in regulated environments (such as FedRAMP and regional certifications) to meet market commitments
Turn ambiguity into clarity: Structure complex technical and governance challenges, establish effective decision forums, and align cross-functional leaders
Influence executive leadership : Partner closely with C-level executives, providing fact-based risk insights, escalating blockers, and driving critical decisions to closure
Establish durable mechanisms : Build scalable frameworks for risk prioritization, dependency management, compliance evidence pipelines, and security reviews
Measure impact and risk reduction : Define metrics to track security posture improvements, vulnerability reduction, audit readiness, and overall business value
12+ years of experience in technical program management, engineering leadership, or security architecture in large cloud or SaaS environments
Proven portfolio-level scope leading multi-team, company-wide security, infrastructure or compliance initiatives over multiple years
Deep domain knowledge across cybersecurity, risk management, cloud security architecture, threat modeling, AI-native SDLC, vulnerability management, and GRC frameworks
Proven delivery of complex technical transformations such as software supply chain security, automated security controls, identity governance or authorizations to operate in regulated environments
Strong executive communication, synthesizing complex technical, legal, and risk scenarios into clear trade-offs and decisions
Ability to influence and align engineering, product, legal, and GRC teams without direct authority
Systems thinking with experience designing and scaling operational frameworks, governance rhythms, and dependency tracking globally
Data-driven decision making using telemetry and risk metrics to guide trade-offs and demonstrate measurable risk reduction
Bachelor’s degree in Computer Science, Information Security, Engineering, Business, or equivalent practical experience

Nice-to-haves

Experience with AI security, trusted AI deployments, adversarial threat defense, or security automation in cloud-native environments
Direct experience leading FedRAMP, DoD IL4/IL5, SOC 2, ISO 27001, or major privacy compliance programs at enterprise scale
Experience scaling software supply chain security, including SBOMs, artifact provenance, and package hardening
Experience partnering directly with C-level executives, CISO, CTrO, and senior engineering leaders in high-stakes environments
Proven track record of building and scaling TPM operating models or communities of practice across engineering organizations
Background in data analytics and security telemetry, translating complex data into actionable leadership insights

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aigo

Platform: atlassian
Effort: medium