Partner 20, Staff Security Technical Program Manager

As a Staff Security Technical Program Manager at a16z crypto, you run the operating system of the Security team. You own the firm's vulnerability management program, drive cross-team security initiatives to completion, and own the planning rhythm that keeps the team and its stakeholders aligned: sprints, OKRs, timelines, and the documentation and ticketing hygiene that make all of it real. Security at a16z moves fast and touches every part of the firm, so your job is to keep that work on schedule, keep decisions written down, and make sure nothing gets dropped between teams.

What you'll do

• Own security remediation across the firm end to end: pull findings from threat models, code reviews, penetration tests, vulnerability management, audits, and incident postmortems into a single tracked backlog, and manage it with clear owners, priorities, and remediation SLAs
• Run the vulnerability management program: scan coverage, patching cadence, exceptions and risk acceptance, and reporting that shows leadership where risk stands
• Work with stakeholders to keep vendor security reviews fast and consistent, and keep requesters informed on where their review stands
• Drive cross-team security initiatives from kickoff through delivery, coordinating work across Security, IT, Legal, HR, and Compliance, and partnering with owners to keep commitments on track
• Build and run the team's execution rhythm: sprint planning, quarterly OKRs, and ticket hygiene that keeps the work visible
• Raise the bar on documentation: program docs, runbooks, decision records, and postmortem follow-ups that stay findable and current
• Define and track the metrics that tell you whether your programs are working, and turn them into actionable insights

What you bring

• 7+ years of technical program management experience, with at least 3 years running security programs
• A track record of owning a vulnerability management program at scale: SLAs, remediation tracking across teams you don't control, executive reporting, and measurable risk reduction
• Technical fluency to be credible with security engineers: you can read a finding, understand severity and exploitability, and push back on a risk rating with reasons
• Working knowledge of common SaaS tools (Okta, Slack, Google Suite, etc.) in an enterprise stack, including their security considerations
• Deep hands-on experience with agile execution: sprint planning, OKR frameworks, ticketing systems (Jira, Linear, or equivalent), documentation platforms like Confluence or Notion, and building program reporting in spreadsheets or BI dashboards
• Clear, brief, and structured writing
• Ability to build strong working relationships across functions like IT, Legal, Compliance, and engineering, and execute through those partnerships
• Low ego, high empathy, and the capacity to collaborate effectively with diverse teams

What we offer

• Salary of $243,000-$284,000, depending on experience, skills, and scope
• Participation in the a16z carry program and various discretionary bonus programs
• Health, dental, vision, disability, and life insurance
• 401K plan
• Vacation and sick leave
• In-office presence required 2 days per week (Tuesday and Thursday) in San Francisco, CA, with occasional days in the Menlo Park, CA office

About a16z crypto

Andreessen Horowitz (a16z) is a venture capital firm founded in 2009 that backs bold entrepreneurs building the future through technology. a16z has $100B+ under management and invests across AI, bio and healthcare, consumer, crypto, enterprise, fintech, games, and companies building toward American dynamism. The a16z crypto team focuses on the cryptocurrency and blockchain ecosystem.