Job Description

We are seeking a Technical Program Manager, Principal Sr. to lead the delivery of Nordstrom’s highest-impact cybersecurity programs — initiatives that protect the company’s customers, data, and operations across every technology and business function.

This senior-most individual contributor role sits within the CISO’s organization, at the intersection of security engineering, governance risk and compliance (GRC), and enterprise technology delivery. You will drive the programs that reduce Nordstrom’s risk posture at scale — partnering with security, platform, and business teams to plan, sequence, and execute complex, cross-functional security initiatives from charter through measurable outcome.

This is not a role for managing programs at arm’s length. It is a role for someone who translates security strategy into executable delivery plans, manages risk and dependencies across a portfolio of concurrent programs, holds partners accountable to commitments, and reports progress with rigor to senior leadership. You will operate with SVP/VP-level visibility and represent program delivery excellence for Nordstrom’s cybersecurity organization.

KEY RESPONSIBILITIES

Program Strategy & Portfolio Leadership

• Own end-to-end delivery for a portfolio of enterprise cybersecurity programs (e.g., identity and access management, cloud security, data protection, incident response, vulnerability management, third-party risk) spanning multiple teams and technology domains.
• Translate security strategy and executive priorities into structured program charters, roadmaps, and delivery plans with clear scope, milestones, and success criteria.
• Sequence and prioritize competing initiatives across the security portfolio based on risk reduction, business impact, and resource constraints.
• Partner with the CISO’s leadership team to shape investment priorities and build/partner/buy decisions for major security initiatives.

Program Governance & Risk Management

• Establish and run program governance — steering committees, checkpoints, and decision forums — that keep security programs on track and escalate issues before they become blockers.
• Identify, track, and drive resolution of program risks, issues, and dependencies across security, engineering, legal, and business stakeholders.
• Ensure programs comply with relevant regulatory, audit, and internal control requirements, partnering with GRC and compliance teams as needed.
• Define and enforce delivery standards and program management best practices across the cybersecurity organization.

Cross-Functional Delivery & Stakeholder Alignment

• Build and lead cross-functional program teams spanning security engineering, IT, platform, legal, privacy, and business units to execute enterprise-wide security initiatives.
• Drive alignment among stakeholders with competing priorities, resolving conflicts and unblocking delivery through structured negotiation and clear articulation of tradeoffs.
• Serve as the primary point of coordination between the cybersecurity organization and business/technology teams impacted by security programs, ensuring changes roll out with minimal disruption.
• Partner with vendors and external partners supporting security program delivery, managing scope, timeline, and contractual commitments.

Metrics, Reporting & Executive Communication

• Define program-level metrics and KPIs that demonstrate risk reduction, delivery velocity, and program health across the security portfolio.
• Build and maintain dashboards and status reporting that give practitioners and senior leadership real-time visibility into program progress and risk.
• Report program status, risks, and impact to VP/SVP-level and executive stakeholders with clarity, rigor, and actionable recommendations.
• Use data and post-program retrospectives to continuously improve program delivery practices across the organization.

Team Leadership & Mentorship

• Mentor and develop TPMs and program managers across the cybersecurity organization, raising the bar for program management rigor and delivery excellence.
• Champion a culture of accountability, transparency, and continuous improvement within the security program management discipline.
• Represent the cybersecurity organization in enterprise-wide program management communities of practice.

YOU OWN THIS IF YOU HAVE…

• 12+ years of experience in Technical Program Management, with a significant portion managing complex, cross-functional cybersecurity, risk, or compliance programs.
• Demonstrated ability to lead delivery of enterprise-scale security initiatives from strategy through execution, across multiple concurrent workstreams.
• Working knowledge of core cybersecurity domains (e.g., identity and access management, cloud security, data protection, incident response, vulnerability management, third-party risk) sufficient to manage delivery credibly with technical stakeholders.
• Experience establishing program governance, risk management, and reporting structures that hold cross-functional teams accountable to commitments.
• A track record of navigating regulatory, audit, and compliance requirements within program delivery.
• Systems-level thinking: ability to hold technical architecture, organizational dynamics, risk posture, and business strategy simultaneously.
• Executive presence: experience influencing at the VP/SVP level with clarity, candor, and strong command of tradeoffs.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or equivalent experience required.

This role is offered as hybrid in Seattle, WA. Candidates must be available to work in office at the Nordstrom corporate headquarters a minimum of 4 days/week to be considered for this position.

Pay Range Details

The pay range(s) below has been provided in compliance with state specific laws. Pay ranges may be different for other locations.

Pay offers are dependent on the location, as well as job-related knowledge, skills, and experience.

$200,500.00 - $332,000.00 Annual

We’ve got you covered…

Our employees are our most important asset and that’s reflected in our benefits. Nordstrom is proud to offer a variety of benefits to support employees and their families, including:

• Medical/Vision, Dental, Retirement and Paid Time Away
• Life Insurance and Disability
• Merchandise Discount and EAP Resources

This position may be eligible for performance-based incentives/bonuses. Benefits include 401k, medical/vision/dental/life/disability insurance options, PTO accruals, Holidays, and more. Eligibility requirements may apply based on location, job level, classification, and length of employment. Learn more in the Nordstrom Benefits Overview by copying and pasting the following URL into your browser: https://careers.nordstrom.com/pdfs/Ben_Overview_20-21.pdf

A few more important points...

The job posting highlights the most critical responsibilities and requirements of the job. It’s not all-inclusive. There may be additional duties, responsibilities and qualifications for this job.

For Los Angeles or San Francisco applicants: Nordstrom is required to inform you that we conduct background checks after conditional offer and consider qualified applicants with criminal histories in a manner consistent with legal requirements per Los Angeles, Cal. Muni. Code 189.04 and the San Francisco Fair Chance Ordinance. For additional state and location specific notices, please refer to the Legal Notices document within the FAQ section of the Nordstrom Careers site.

Applicants with disabilities who require assistance or accommodation should contact the nearest Nordstrom location, which can be identified at www.nordstrom.com.

Please be mindful that there may be legal notices and requirements related to this job posting that are specific to your state. Review the Career Site FAQ’s for relevant information and guidelines.

Current Nordstrom employees: To apply, log into Workday, click the Careers button and then click Find Jobs.

Nordstrom keeps job postings open for at least one day after the posting date.

© 2026 Nordstrom, Inc