Jobs in the United States

25+ jobs

Save this search

Added just now
Account Manager
Veolia Environnement SA
Freeport, TX
Join Veolia as an Account Manager in our Chemical Solutions and Monitoring (CSM) division and be at the forefront of innovation and sustainability!
Added 1 min ago
CT
Project Manager
California Trout
Chico, CA
- $64,000 to $73,000 USD / year
California Trout seeks a motivated, highly organized Project Manager to develop and implement conservation projects on Sacramento River tributaries. Based in Chico, the Project Manager will…
Added 1 min ago
Civil Engineering - Land Development Market Leader
ESP Associates
Raleigh, NC
Are you an established Civil Engineering land development professional looking to make a difference in the community around you? Do you have an entrepreneurial spirit and enjoy empowering…
Added 2 mins ago
A
CADD/BrIM Technician/Design Manager
AECOM
Omaha, NE
- $90,000 to $155,000 USD / year
…the project lifecycle – from advisory, planning, design and engineering to program and construction management. AECOM is a Fortune 500 firm that had revenue of $16.1 billion in fiscal year…
Added 2 mins ago
Clinical Engineering, Operations Director
Trimedx Holdings LLC
Anywhere, WA · Seattle, WA
The Operations Leader, Clinical Engineering leads clinical engineering initiatives to provide superior customer service and operational efficiency by managing the execution of the Trimedx…
Added 2 mins ago
Product Mgr II
LexisNexis Risk Solutions FL Inc. Company
Evanston, IL · FL · KY · NH · NJ · NC · NY · RI · CT · OH · TN · TX · VT · IL · LA · VA · DE · ME · Washington, DC · WV · AL · WI · MD · MA · IN · MI · PA · AR · SC · MN · MS · MO
The Product Manager II will own one or more product features and lead project execution. He/she will own product development plans and represent their feature(s) within the cross-functional…
Added 2 mins ago
DO
ASSISTANT DIRECTOR
Department of Food & Agriculture
CA
- $10,349 to $12,526 USD / month
…policy development of the Antimicrobial Use and Stewardship Program (AUS). The CEA has direct supervision of the Office, the Special Assistant, ISD Administrative staff; and will serve in a…
Added 4 mins ago
Operation Manager
H&S Bakery
Rosedale, MD
The Operations Manager is responsible for directing and managing all production, maintenance and sanitation activities. Ensures product quality and adherence to all applicable standards.…
Added 5 mins ago
TC
Construction Manager- MHU Replacement and Reconstruction
Timberline Construction Group LLC
Asheville, NC
- $85,000 to $110,000 USD / year
…rehabilitation, and stick-built reconstruction. The Construction Manager will work closely with clients, contractors, subcontractors, inspectors, and internal team members to ensure…
Added 5 mins ago
Manager, Data Analyst - AML
Capital One
Richmond, VA · McLean, VA · Plano, TX · Chicago, IL
Our mission is to empower data-driven decision-making, foster innovation without limits, and make Capital One’s AML program pre-eminent. We achieve this by implementing rigorous data…
Added 5 mins ago
Senior Solution Architect (Senior Manager)
INC Huron Consulting Group Inc.
Remote, United States
…Studio custom agent, a Power Platform workflow, or a platform engineering…
Added 5 mins ago
Copilot Studio / Power Platform Engineer (Senior Manager)
INC Huron Consulting Group Inc.
Remote, United States
…buildable and deployable at enterprise scale. This is a platform engineering position aligned to the Enablement & Solution Design pillar; the day-to-day work is tightly coupled with the…
Added 5 mins ago
R
Manager, Regulatory Compliance and Permitting
Ramboll
Blue Bell, Pennsylvania, PA
- $115,000 to $144,000 USD / year
Ramboll is a global multi-disciplinary engineering, design, and consultancy company. We truly support and encourage your professional development, invite you to unfold your ingenuity and…
Added 5 mins ago
R
Manager, Regulatory Compliance and Permitting
Ramboll
Princeton, New Jersey, NJ
- $115,000 to $144,000 USD / year
Ramboll is a global multi-disciplinary engineering, design, and consultancy company. We truly support and encourage your professional development, invite you to unfold your ingenuity and…
Added 5 mins ago
R
Manager, Regulatory Compliance and Permitting
Ramboll
Arlington, Virginia, VA
- $115,000 to $144,000 USD / year
Ramboll is a global multi-disciplinary engineering, design, and consultancy company. We truly support and encourage your professional development, invite you to unfold your ingenuity and…
Added 5 mins ago
R
Manager, Regulatory Compliance and Permitting
Ramboll
Syracuse, New York, NY
- $115,000 to $144,000 USD / year
Ramboll is a global multi-disciplinary engineering, design, and consultancy company. We truly support and encourage your professional development, invite you to unfold your ingenuity and…
Added 5 mins ago
R
Manager, Regulatory Compliance and Permitting
Ramboll
Philadelphia, Pennsylvania, PA
- $115,000 to $144,000 USD / year
Ramboll is a global multi-disciplinary engineering, design, and consultancy company. We truly support and encourage your professional development, invite you to unfold your ingenuity and…
Added 6 mins ago
Program Manager, Academic (Delaware Regional Medical Campus)
Thomas Jefferson University
United States
The Program Manager Academic is responsible for the planning, implementation, management, and continuous improvement of academic programs, educational initiatives, and/or curriculum…
Added 6 mins ago
Program Manager, IT Cybersecurity
Aprio
Atlanta, GA
Aprio is seeking a Program Manager to lead the operational program that keeps the firm's Cybersecurity Operations team running at its best. In this role, you will own the program…
Added 8 mins ago
Program Manager Accreditation
Cleveland Clinic
United States
As Program Manager, Accreditation, you will coordinate hospital accreditation activities and ensure continuous survey readiness across the hospital, affiliated organizations, and off-site…
Added 8 mins ago
Senior Lead Digital Product Manager
B10 Wells Fargo Bank, N. A.
CHARLOTTE, NC · SAN FRANCISCO, CA
Wells Fargo is seeking a Senior Lead Digital Product Manager to serve as Product Owner for Adobe Experience Manager (AEM). This role will translate product strategy into executable…
Added 8 mins ago
Innovation Analyst
Working at Signature Aviation
Remote, United States
…as the bridge between Commercial stakeholders and IT Product Engineering teams, this role translates business priorities into executable work and manages initiatives through the innovation…
Added 8 mins ago
CH
Lead DevOps Engineer
Cohere Health
United States
- $150,000 to $185,000 USD / year
We are looking for an experienced DevOps Team Lead to lead our DevOps engineering team in building, scaling, and securing the infrastructure that powers Cohere Health's platform. In this…
Added 8 mins ago
Technical Program Manager, Security
Brain Co.
San Francisco, CA
As our first Technical Program Manager on the Security team, you’ll run the security programs that touch every part of the company from the security review that unblocks a government deal,…
Added 8 mins ago
Technical Program Manager, Strategy & Ops
Brain Co.
San Francisco, CA
As a Technical Program Manager, Strategy & Ops, you’ll be responsible to deliver technical, business, and organizational programs that shape how Brain Co. builds, operates, and scales. Your…

Brain Co.

Technical Program Manager, Security

San Francisco, CA, United States

Apply About employer

Applications open in a new tab.

Job details

Posting language: English
Posted: Nov 9, 2026

Original job description

OUR MISSION

Rebuild how the world works, to make institutions work better for the people they serve.

ABOUT BRAIN CO.

Brain Co. builds AI-native operating systems for large, regulated institutions. Each system is built for a specific industry, powered by agents that push real workflows forward. Underneath it all is Atlas, our proprietary platform that keeps customers in control, secure by design, and never locked into one model.

WHY NOW

Brain Co. is entering its next phase of production deployments on a national scale with an elite team built from Palantir, Google, Meta, and Nvidia, and a growing footprint across government, insurance, health, and financial services.

Joining now means shaping both the company and a new category of applied AI. Every project here ships to production and is expected to create measurable customer value and impact.

You'll work alongside exceptional peers on some of the hardest problems in applied AI. It’s the kind of work you'll still be proud of in ten years from now.

At Brain Co., we focus on applying frontier AI to real institutional challenges, working alongside governments, healthcare systems, and critical industries to modernize how essential services operate. We are looking for leaders who want to help bring new technology into institutions that impact millions of people.

Security work at Brain Co. does not stay inside the security team. Audit readiness needs Engineering, HR, Finance, and Legal. Enterprise deals stall on security questionnaires and customer security reviews. Identity spans IT and Security, and neither can finish it alone. Vulnerability remediation lands on engineering teams that don’t report to us. Someone has to own the delivery of that work end-to-end: the plan, the owners, the cadence, and the finish line. That’s this role.

Brain Co. carries one of the most demanding regulatory loads of any company our size: SOC 2 Type II and HIPAA in place today, with ISO 27001, NIST 800-171, and FedRAMP/GovRAMP on the near-term roadmap. That’s what it costs to sell to governments, hospitals, and financial institutions and done right, it’s how we win the next ones.

As our first Technical Program Manager on the Security team, you’ll run the security programs that touch every part of the company from the security review that unblocks a government deal, to the identity program that spans IT and Security, to the incident process the whole company depends on. You’ll report to the Head of Security as an individual contributor with the scope and trust to define how security programs run here.

This is not a ticket-herding job. You’ll be technical enough to read an IAM policy, follow an architecture diagram, and push back on a remediation plan that doesn’t hold up, and operational enough to turn a recurring mess into a system that runs without you in the room.

You won’t be doing this alone. Security, IT, GRC, Engineering, and GTM all want these programs to move. You’ll arrive with teams that are eager to be pulled in rather than dragged, and partners who’ll do the work if you give them a clear plan and a clear finish line. What’s been missing is the person who holds the whole picture, not the willingness to help.

What You’ll Work On

Drive security sales enablement operations: the operational backbone of the customer trust surface. Security questionnaires, RFP security sections, the trust portal, DPA/BAA intake, and customer security reviews. Build the reusable answer library, evidence packages, and intake process so no deal restarts from scratch and security is never the reason a cycle slips in close partnership with GRC.
Vendor Management Process: Complete Vendor Security Reviews for vendors that will be both internal/ corporate vendors and vendors supporting customer facing products/ services. Understanding the difference between what is required for each of those types of vendors. Awhile looking for ways and streamline our vendor management process.
Support audit readiness as a delivery program, not a scramble. Own the plan behind SOC 2 Type II and HIPAA today and the path through ISO 27001, NIST 800-171, and FedRAMP/GovRAMP, control owners, evidence collection, gap remediation tracking, auditor logistics, and readiness milestones, in close partnership with GRC.
Turn vulnerability management into a continuous, self-managing program that runs at machine speed. Definitions, SLAs by severity, automated routing to the engineering teams that own the fix, an exception process people actually use, and dashboards that stay current on their own - so the program reports itself and only the exceptions reach a human.
Support the planning and tracking of GRC-related continuous monitoring activities to ensure all necessary compliance related requirements are being met. This may include, proper access provisioning/deprovision tasks are being evidenced, access reviews are being performed in proper cadence, BCP and IR testing, configuration reviews, etc.
Drive security-heavy product launches as needed. Most launches won’t need you; some can’t ship without you. When security is load-bearing, such as government and healthcare deployments, multi-cloud environments, you’ll embed with the product and engineering teams and make sure threat modeling, security reviews, and sign-offs happen early enough to matter, with launch blockers surfaced before launch week.
Drive cross functional corporate security programs across the company SaaS security posture and shadow IT, identity, insider risk, physical and office security, and security awareness and phishing programs. These programs live in everyone’s workflow and nobody’s job description; you’ll give them owners, a cadence, and measurable coverage.
Drive security-heavy product launches as needed. Most launches won’t need you; some can’t ship without you. When security is load-bearing, government and healthcare deployments, on-prem environments, agent workloads running inside customer systems - you’ll embed with the product, engineering, security and IT teams and make sure dependencies and sign-offs happen early enough to matter, with launch blockers surfaced well before launching deadlines.
Own the operating process around incident management escalation paths, comms templates, tabletop exercises, incident commander support during live events, and post-incident reviews where the remediation items get driven to done, not filed.
Run the security team’s operating cadence: roadmap and planning, program status, metrics and reporting to leadership, third-party risk operations, and the strategic initiatives that show up mid-quarter without a plan attached.
Be the person who knows the state of the most critical security programs: who owns what, what’s at risk, what’s blocked, and what leadership needs to hear before they ask.

You Might Be a Great Fit If You…

Have 5+ years in technical program or project management, including time spent on security, infrastructure, IT, or compliance programs.
Have run cross-functional programs where you had zero formal authority over the people doing the work - and still landed them.
Can hold your own with engineers. You can read an IAM policy, follow a cloud or Kubernetes architecture discussion, and tell the difference between a CVE that matters and one that doesn’t, without needing everything translated for you.
Have run or been deep in at least one real audit cycle - SOC 2, HIPAA, ISO 27001, FedRAMP, or equivalent - on the delivery side, owning evidence and remediation rather than watching from a dashboard.
Have supported the security side of enterprise deals: questionnaires, customer security reviews, and the calls where a customer’s security team asks the hard question.
Build systems instead of reporting status. When you see the same fire drill twice, your instinct is to build the intake, the template, or the automation that kills it.
Are comfortable being the first TPM in a function, to build the systems driving the outcomes.
Write clearly. Much of this job is written: the program plan, the customer response, the executive update, the post-incident review.
Close loops compulsively. Nothing you own goes quiet.

Bonus Points For

High level privacy/legal documentation (e.g. DPAs, BAAs, etc.) review experience (e.g. you don’t need to be a lawyer but understanding what to look for and flag for review)
Hands-on experience with FedRAMP/GovRAMP, IL4/IL5, or equivalent government-customer compliance requirements, including on-prem deployments.
A practitioner background in security engineering, IT, or GRC that you still use.
Fluency with compliance automation and security tooling - Vanta, Drata, Secureframe, vulnerability scanners, identity platforms - and the judgment to know when the tool is the wrong answer.
Experience at an AI or ML-heavy company, including the novel security and evidence questions that come with model data and agent actions.
Time as an incident commander or incident process owner.

Why Join Us

Own the delivery of security programs for an AI platform deployed in governments, hospitals, and critical industries worldwide - where the regulatory bar is real and the work matters.
Define the role 0→1. You’re the first security TPM here, with a direct line to the Head of Security and room to grow the scope as the company scales.
Land with the org behind you. This role was created because teams across the company asked for it - you’ll have executive sponsorship and cross-functional partners who are genuinely eager to push these programs forward with you.
Do work with visible impact: the programs you run are what unblock enterprise and government deals.
Work alongside senior engineers from Tesla, DeepMind, Databricks, and other top engineering orgs who treat security as a partner, not a tax.
Earn competitive compensation and meaningful equity in a high-growth company.

Apply About employer

Report this job