Director of TPM, Security

About the Team

Technical Program Managers (TPMs) are critical to Databricks’ ability to deliver secure, resilient, and trustworthy products at scale. As the connective tissue across Engineering, Product, Security, Privacy, Legal, Compliance, Sales, and Customer teams, Security TPMs define repeatable processes, accelerate execution, and ensure security and privacy are embedded across the product lifecycle.

Our security roadmap spans cloud infrastructure, platform services, product features, and customer trust programs. As Director of Security TPM, you will lead the team responsible for orchestrating security initiatives that cross organizational boundaries, from secure-by-design engineering programs to compliance readiness, incident response, and risk management. You will work directly with senior engineering and product leadership, as well as strategic customer accounts, to align Databricks’ security posture with business strategy and customer expectations.

What You’ll Do

• Lead, mentor, and scale a team of Security Technical Program Managers, fostering a culture of trust, accountability, and measurable impact.
• Translate business and technical strategy into security initiatives that mitigate risk, improve resilience, and safeguard customer data.
• Establish KPIs and risk metrics to measure the effectiveness of security programs and ensure executive visibility into progress and gaps.
• Partner with engineering, product, and security leadership to drive alignment, prioritization, and risk-based decision making across the company.
• Define and operationalize the execution strategy for security programs, including secure development practices, incident readiness, and compliance frameworks.
• Build and sustain trusted relationships with stakeholders across Engineering, Legal, Privacy, and field-facing teams.
• Lead large-scale cross-functional programs with cloud providers and internal teams to strengthen security controls in infrastructure and product.
• Drive the operating rhythm for Security TPM, including planning, reviews, incident retrospectives, and continuous improvement cycles.
• Champion automation and scalability in security operations, streamlining processes and embedding security guardrails into DevOps workflows.

What we need:

• B.S. in Computer Science, Information Security, or related technical discipline (or equivalent experience).
• 15+ years of experience in technical program management, engineering leadership, or security program leadership with large-scale infrastructure or cloud environments.
• Proven track record building and leading TPM teams with a focus on security, compliance, or risk management.
• Deep experience in cloud security (AWS, Azure, or GCP), security frameworks (SOC2, ISO27001, FedRAMP), and secure software development practices.
• Demonstrated success in program planning, risk management, and executive communication in high-growth or complex environments.
• Strong cross-functional collaboration skills with executives, engineers, and external stakeholders.
• Comfort leading multi-year security strategies while delivering incremental, measurable improvements.

Preferred Qualifications:

• Experience leading incident management, post-incident reviews, and driving systemic fixes through engineering and process improvements.
• Background in DevSecOps, CI/CD security, and embedding controls in automated pipelines.
• Familiarity with compliance and regulatory programs (e.g., GDPR, HIPAA, PCI, FedRAMP) and experience preparing organizations for audits.
• Hands-on familiarity with cloud infrastructure, identity management, and threat detection/response practices.
• Ability to build dashboards, metrics, and reporting systems to track risk posture and program success.

Personal Qualifications

For example: Breadth of relevant functional expertise, Innovator, Builder, Team Leadership, Business Acumen, Thrives in fast paced environment, Trusted Partner