Role Overview

The Security Technical Program Manager (TPM) will be responsible for the definition, execution, and oversight of critical security programs focused on client assurance, operational compliance, and platform security. This role requires a strong focus on program management and cross-functional coordination to embed security and legal standardization across client projects and manage ongoing compliance activities. The ideal candidate will drive the standardization of legal verbiage and security practices across the organization's client-facing work, ensuring predictable execution, reduced risk, and consistent security standards for client codebases. This role partners closely with Security, Engineering, Legal, Compliance, and Client teams.

Key Responsibilities

Portfolio & Program Management

• Own the portfolio view of Tech Platforms within the broader security strategy.
• Structure and manage strategic programs required to deliver roadmap objectives
• Define milestones, delivery plans, and success metrics for major initiatives.
• Track progress against portfolio commitments and escalate risks proactively.
• Manage cross-functional dependencies across Engineering, Product Management, Legal, and other stakeholders.
• Support quarterly and annual planning cycles, including investment
• Ensure predictable execution through structured governance and reporting cadence.

Cross-Functional Collaboration

• Collaborate with Engineering, Product Management, Legal, Risk, and Compliance stakeholders.
• Facilitate stakeholder alignment, trade-off decisions (e.g., security vs. speed), and expectation management.
• Influence without direct authority to drive secure design principles and manage cross-functional projects to ensure delivery.

Client Project Standardization:

• Lead the strategic initiative to standardize legal verbiage and security requirements across client projects.
• Client Code Security: Drive implementation of consistent security standardization to secure client codes and ensure ongoing maintenance and protection of the codebase.
• Own the coordination of security deployment approvals for client projects with clients, engineering and security teams

Operational Security & Compliance

• Coordinate PCI compliance efforts by creating required reports and managing activities for all PCI accounts.Manage the coordination of the yearly PCI/ISO Audit for all accounts within the Tech Platform.Conduct quarterly User Access Reviews (UAR) to certify user access for AWSGenerate and report artifacts for 1LOD, 2LOD, 3LOD for corrective action plan and risk reduction plans

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or related discipline.
• 5+ years of experience in technical program management, cybersecurity, or risk management
• Demonstrated experience in Product Security (AppSec), DevSecOps, or AI/ML Security domains.
• Demonstrated experience building and managing strategic roadmaps tied to measurable outcomes.
• Strong understanding of security compliance frameworks (e.g., PCI, ISO) and operational security domains (e.g., User Access Reviews, AWS security roles, Secure SDLC/SAST)
• Strong understanding of secure development practices, vulnerability management, and common software security frameworks.
• Proven ability to partner with engineering and legal teams to drive standardization and manage security due diligence.
• Excellent written and verbal communication skills, with demonstrated experience facilitating stakeholder alignment and influencing without direct authority
• Experience working in matrixed organizations and managing dependencies across multiple business units.

The Role:

As a Principal Software Engineer on the Cyberbank Core team at Galileo, you will lead broad, impactful projects across multiple teams as one of the senior-most technical contributors shaping our next-generation lean core banking platform. Your influence will span teams, projects, and geographies, driving both technical direction and how our teams design, build, and operate the services and data pipelines that power scalable, performant, and secure banking products.

You will be hands-on and in the details as an exemplary practitioner: in the software we develop, in the infrastructure we operate, and in the tools and techniques we use to test, release, and maintain it at scale. You will help teams evolve codebases to ship improvements safely and frequently in a regulated, cloud-native environment. As part of this, you will steward a broader engineering community and mentor engineers across the organization.

You will proactively identify the right problems to solve and advocate for organizational priorities. This role is inherently cross-functional, you will work closely with engineering, product, compliance, data, and executive stakeholders to define and execute on technical strategy for Cyberbank Core. You'll face and solve a wide range of challenges: architectural, operational, and product-related, across multiple products and geographies.

What You’ll Do:

• Own driving Cyberbank Core's software architecture and systems forward — setting long-term direction and executing on it across multiple teams and quarters, with a particular focus on the core banking services, data pipelines, and API platform.
• Build as an exemplary practitioner: get hands-on developing software and set a high quality standard for teams to follow.
• Define the right boundaries, APIs, and integrations between teams and with clients and partners to ensure technical and business success across multiple geographies.
• Solve complex engineering problems endemic to high-availability, low-latency, scalable distributed systems in a regulated banking environment.
• Execute large-scale projects — leading design, planning, and execution across multiple teams to drive technical direction and product outcomes.
• Drive the design and implementation of scalable, secure, and highly available SaaS services and data engineering pipelines that support next-generation core banking capabilities.
• Proactively identify broader problems and opportunities. Anticipate and design the next generation of our systems and products.
• Raise the quality of our engineering teams: identify opportunities and advocate for improvements to how we write software, our approach to testing and quality, and the habits and processes of highly effective teams.
• Mentor and coach individuals and teams across the company. Steward engineering communities, fostering design collaboration and mindshare.
• Articulate how technical architecture and team structure interact, and provide input on the right organizational structure to deliver on our engineering goals.
• Serve as a strategic advisor to leadership, representing technical strategy to business and executive stakeholders and participating in strategic planning.
• Continuously drive improvement, new practices, and operational excellence initiatives across the department.
• Champion improvements in code, design, and operational reviews. Lead initiatives that improve department software quality and operations. Be a stakeholder in engineering norms and standards for code quality, software quality, and operational excellence.

What You’ll Need:

• 10+ years of programming experience; mastery of software development independent of language.
• Advanced expertise in designing, building, and operating large-scale fault-tolerant distributed systems, applications, databases, and workflows.
• Demonstrated experience with continuous delivery principles and techniques: you've built systems with layered test automation that is always safe for automated releases to production, enabling a great, low-cycle-time developer experience.
• Deep expertise in designing and managing cloud-based solutions with a strong focus on resiliency experience with AWS (or other public cloud infrastructure) required.
• A high standard for what "great" looks like, and experience continuously improving legacy systems to reach it.
• Strong judgment, and experience recognizing and driving out critical decisions in a balanced and pragmatic way.
• Excellent verbal and written communication skills with the ability to influence and collaborate effectively across remote, distributed teams.
• Experience working in a regulated industry.
• Experience working on banking backends, particularly cores, ledgers, or payment systems is a plus.
• Bi-lingual Spanish/English required.