Apple Services Engineering (ASE) team is one of the most exciting examples of Apple's long-held passion for combining art and technology! We enable Apple's apps and services, and we do it on an extensive scale, to hundreds of millions of customers in over 35 languages to more than 150 countries. The ASE Security team is seeking an experienced Engineering Program Management leader to build and lead a team of Security Engineering Program Managers supporting our Risk & Vulnerability Management team. Within ASE, you and your team will work with colleagues across Apple to identify, prioritize, and reduce security risk, and to make sure vulnerabilities are remediated quickly and consistently across our services and infrastructure.
As our work is integral to the entire infrastructure stack, you will have the opportunity to work with a wide variety of engineering teams across Apple. We cultivate strong relationships, build trust, and influence without direct authority. We communicate openly and clearly, collaborate enthusiastically, and value a diverse culture of healthy debate. Do these points resonate with you? If so, we want to talk!
As a Security Engineering Program Management leader in ASE, you are both a people leader and a functional expert in security risk and vulnerability management at scale. While working directly with ASE's Risk & Vulnerability Management team, security engineering, and service owners across Apple, you and your team will turn risk and vulnerability data into prioritized, well-run programs that measurably reduce risk. This will include scaling the Vulnerability Management program, driving remediation efforts across the organization, managing the delivery of security controls, guardrails, and frameworks that help protect our customers' data in Apple's infrastructure, and giving leadership clear visibility into our risk posture. This is a hands-on leadership role: you will stay close to the details of your programs while growing a team of program managers and shaping how security risk work gets done across ASE. You and your team will be responsible for identifying, planning, and delivering program security outcomes by engaging a broad set of internal and external stakeholders.
Build Trust and Influence: Experience fostering collaboration and influencing stakeholders without direct authority to achieve program objectives.
Communication Skills: Ability to convey complex technical information to both technical and non technical audiences, including executive and senior leadership, with clarity, confidence, and alignment.
Drive What Matters: Able to focus and simplify, balancing the details with goals, priorities, and trade-offs in mind.
Experience building or scaling a vulnerability management or security risk management program.
Familiarity with vulnerability prioritization and risk assessment practices, such as CVSS or similar scoring approaches.
Experience with cloud security.
Experience using data visualization tools such as Tableau to report on program health and risk posture.
Familiarity with applying AI tools to program management or security workflows.
Experience in talent development, succession planning, or organizational design.
Industry certifications in security or risk management (e.g., CISSP, CISM, CRISC), or equivalent experience.
8+ years of experience in technical program management, including 4+ years managing projects or programs in the field of security, OR a combination of 4+ years of program management and 4+ years in a related field such as security engineering, vulnerability management, risk management, or engineering leadership.
3+ years of experience managing people, such as a team of program managers, engineers, or other technical professionals.
People Leadership: Experience hiring, coaching, and developing team members at different stages of their careers.
Project Management: Proficiency in managing complex projects, including defining scopes, setting timelines, and coordinating cross-functional teams to ensure timely and successful delivery.
Risk Management Skills: Ability to use data to identify, assess, and prioritize security risks, and to communicate appropriate mitigation strategies to protect organizational assets.
Technical Proficiency: A solid understanding of software development, systems engineering, or related technical fields to effectively oversee vulnerability management and remediation programs.
Education: BS in Computer Science, Computer Engineering or other technical field or equivalent industry experience
We’re a diverse collective of thinkers and doers, continually reimagining what’s possible to help us all do what we love in new ways. And the same innovation that goes into our products also applies to our practices — strengthening our commitment to leave the world better than we found it. This is where your work can make a difference in people’s lives. Including your own.
Apple is an equal opportunity employer that is committed to inclusion and diversity. Visit apple.com/careers to learn more.
