Staff Technical Program Manager, Security + IT

<div class="content-intro"><p>Discord has a highly engaged community of millions of daily active users who use the platform for many different reasons, but there’s one thing that nearly everyone does: <strong>play video games.</strong> Discord plays a uniquely important role in the future of gaming, and we are focused on making it easier and more fun for people to hang out before, during, and after playing games.</p></div><p></p> <p>Technical Program Managers operate within the Security and IT organization and have technical knowledge that enables them to manage company-wide programs, guide cross-team projects, and accelerate the execution of a team's roadmap. <strong>Security and IT are the teams responsible for protecting Discord's users, employees, and infrastructure -</strong> spanning security engineering, detection &amp; response, corporate IT, and the governance, risk, and compliance (GRC) programs that keep Discord audit-ready and regulator-facing.</p> <p>This is a Staff TPM role, reporting to the Director of TPM, responsible for developing and driving security, IT, and compliance programs across a fast-moving, high-scrutiny environment. If you are a productive, first-principles thinker who develops strong relationships between partners, we'd encourage you to apply!</p> <p><strong>What you'll do</strong></p> <ul> <li>Work closely with Security Engineering, IT, Legal, Privacy, and other cross-functional engineering teams to implement solutions supporting detection &amp; response, identity &amp; access management, and endpoint/device management</li> <li>Manage multiple complex programs, often with competing timelines and resource needs across security, IT, and compliance stakeholders</li> <li>Develop a holistic and enduring ownership model for our code, products, and programs</li> <li>Leverage your strong compliance-centric mindset to help build and run our Security and IT programs.</li> <li>Partner with Security, IT and GRC leadership to identify, develop, and run programs that mature our control environment (familiar with SOC 2, ISO 27001, NIST) while keeping pace with product velocity</li> <li>Drive programs such as BYOD/MDM, identity &amp; access (joiner/mover/leaver, privileged access, access reviews), and third-party/vendor risk management toward measurable, audit-ready outcomes</li> <li>Partner with Security leadership to identify, develop, and run programs that improve the security of our users and company</li> <li>Manage multiple complex projects, often with competing timelines and resource needs</li> <li>Streamline our Security Incident Management processes, including severity classification and escalation</li> </ul> <p><strong>What you have</strong&g