[Remote] Senior Technical Program Manager, Security

Note: The job is a remote job and is open to candidates in USA. Aledade, Inc. is dedicated to empowering independent primary care practices and improving healthcare outcomes. The Senior Technical Program Manager, Security is responsible for enhancing the security program's maturity, ensuring compliance with HIPAA and financial controls, and integrating security into engineering practices while fostering alignment across various teams.ResponsibilitiesAssess the current state with clear eyes: identify what’s working, what’s underdeveloped, and what needs to be rebuiltBuild a prioritized, multi-quarter roadmap that sequences risk reduction against business reality — without waiting to be handed a problem statementEstablish governance, ownership, and metrics that make the portfolio legible and actionable across security leadership, engineering leadership, and executivesHold the line on outcomes — not activity or artifactsMake security by design the operating standard: shift-left practices, threat modeling, architecture review, and controls embedded into how teams plan and shipOwn the intersection of what security requires and what engineering can build — and move both sides toward it, fluentlyRemove the blockers that sit between security intent and engineering executionBuild the habits and structures that outlast any individual program or initiativeTranslate HIPAA, financial controls, and governance requirements into resilient programs that reduce actual exposure and scale — not just satisfy milestone auditsSequence compliance investments against where the company is going, not just where it’s beenBuild the evidence frameworks, metrics, and operational readiness that hold up under real scrutiny at scaleSynthesize Aledade posture about AI risk, guardrails, and governance as AI becomes embedded in how we work and what we buildBuild the scaffolding — principles, review processes, accountability structures — that gives others a framework to execute againstOperate with conviction in a space where the industry is still writing the rulesOperate at the seam between security, engineering, compliance, legal, and finance — without owning any of the headcountEliminate toil that crushes effectiveness of the subject matter experts around you by clearing the path, not walking it for themSurface what’s being normalized that shouldn’t be — the risks deferred, the gaps unnamed, the programs that exist only on paperDrive evidence-based decisions that stick — from architecture, through build, to the risk level with executivesFull-stack program leadership: equally at home in an architecture review, a compliance audit, a risk conversation with the CTO, and a sprint planning session with an engineering teamSkills10+ years in technical program management at Staff-level scope — cross-org, ambiguous, high-stakes security programsDeep security domain fluency: frameworks, controls, HIPAA and financial-specific obligations, risk management — and how all of it maps to real engineering decisionsTechnical judgment strong enough to question the status quo, challenge architectural decisions, and identify real risk versus inherited noiseProven track record of transforming security programs — advancing maturity, closing gaps, and positioning programs for where the business is goingInfluence without authority across senior security, engineering, compliance, and executive stakeholdersOutcomes orientation: risk reduction and program maturityExperience in healthcare or other highly regulated environments where security failure has consequences beyond the companyTrack record of building security governance and operating models from the ground upFamiliarity with AI and ML risk frameworks and emerging AI governance practiceOperated at a company in significant growth — where the security foundation had to be built while the business was already running on itCan move between a threat model conversation with a security engineer and a risk framing conversation with a CFO without losing accuracy in either directionBenefitsFlexible work schedules and the ability to work remotely are available for many rolesHealth, dental and vision insurance paid up to 80% for employees, dependents and domestic partnersRobust time-off plan (21 days of PTO in your first year)Two paid volunteer days and 11 paid holidays12 weeks paid parental leave for all new parentsSix weeks paid sabbatical after six years of serviceEducational Assistant Program and Clinical Employee Reimbursement Program401(k) with up to 4% matchStock optionsCompany OverviewAledade is a physician-led public benefit corporation and national leader in value‑based care. It was founded in 2014, and is headquartered in Bethesda, Maryland, USA, with a workforce of 1001-5000 employees. Its website is https://www.aledade.com.Company H1B SponsorshipAledade, Inc. has a track record of offering H1B sponsorships, with 5 in 2026, 19 in 2025, 11 in 2024, 7 in 2023, 1 in 2020. Please note that this does not guarantee sponsorship for this specific role.