Security Technical Program Manager

At Asana, security is foundational to our mission of helping teams work together effortlessly. Our Security organization protects Asana’s employees, users, and customers by proactively addressing threats, enabling secure product development, and embedding security into the fabric of how we operate. We partner closely with Engineering, Product, IT, Legal, and Compliance to build and maintain trust at scale.

As a Security Technical Program Manager, you'll be the connective tissue across the entire Security organization, driving the strategy, programs, and operational rhythms that make the team highly effective and externally visible.

This is a high-impact, high-autonomy role. You'll define how Security as a function operates: how it plans, how it measures itself, how it communicates progress, and how it executes on its biggest bets. You won't just run programs, you'll shape the operating model that makes all programs run better.

This role is based in our San Francisco office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner. If you're interviewing for this role, your recruiter will share more about the in-office requirements.

What you’ll achieve

• Lead high-impact, cross-functional special projects that span organizational boundaries, from standing up new security capabilities and maturity programs to company-wide strategic initiatives
• Own the Security organization's annual and quarterly planning cycles, translating multi-year security strategy into a prioritized, executable roadmap
• Drive the prioritization and communication of security asks across stakeholders, building a unified framework that influences how partner teams plan and prioritize security work
• Define and own the Security team's KPI framework, covering risk posture, program health, and strategic goal progress
• Build dashboards and reporting cadences that give leadership real-time visibility into what's working, what's at risk, and where decisions are needed
• Establish and continuously improve the operating cadences (All Hands meetings, program reviews, OKR check-ins) that keep the organization aligned and moving fast
• Act as a thought partner to security leadership on org design, process improvement, and operational scale

About you

• 8+ years of TPM experience, with meaningful time in a security context (security engineering, GRC, product security, infra security, or similar)
• Strong understanding of security with the ability to engage technical teams and communicate clearly to executive stakeholders
• Demonstrated ability to lead large-scale, cross-functional programs from ambiguous inception through delivery
• Exceptional written and verbal communication, with proven ability to influence without authority at all levels
• Track record of operating with high autonomy — you create the structure rather than waiting for it

At Asana, we're committed to building teams that include a variety of backgrounds, perspectives, and skills, as this is critical to helping us achieve our mission. If you're interested in this role and don't meet every listed requirement, we still encourage you to apply.

What we’ll offer

Our comprehensive compensation package plays a big part in how we recognize you for the impact you have on our path to achieving our mission. We believe that compensation should be reflective of the value you create relative to the market value of your role. To ensure pay is fair and not impacted by biases, we're committed to looking at market value which is why we check ourselves and conduct a yearly pay equity audit.

For this…