Director of TPM, Security

P-1209

About The Team
Technical Program Managers (TPMs) are critical to Databricks' ability to deliver secure, resilient, and trustworthy products at scale. As the connective tissue across Engineering, Product, Security, Privacy, Legal, Compliance, Sales, and Customer teams, Security TPMs define repeatable processes, accelerate execution, and ensure security and privacy are embedded across the product lifecycle.

Our security roadmap spans cloud infrastructure, platform services, product features, and customer trust programs. As Director of Security TPM, you will lead the team responsible for orchestrating security initiatives that cross organizational boundaries, from secure-by-design engineering programs to compliance readiness, incident response, and risk management. You will work directly with senior engineering and product leadership, as well as strategic customer accounts, to align Databricks' security posture with business strategy and customer expectations.

What You'll Do

• Lead, mentor, and scale a team of Security Technical Program Managers, fostering a culture of trust, accountability, and measurable impact.
• Translate business and technical strategy into security initiatives that mitigate risk, improve resilience, and safeguard customer data.
• Establish KPIs and risk metrics to measure the effectiveness of security programs and ensure executive visibility into progress and gaps.
• Partner with engineering, product, and security leadership to drive alignment, prioritization, and risk-based decision making across the company.
• Define and operationalize the execution strategy for security programs, including secure development practices, incident readiness, and compliance frameworks.
• Build and sustain trusted relationships with stakeholders across Engineering, Legal, Privacy, and field-facing teams.
• Lead large-scale cross-functional programs with cloud providers and internal teams to strengthen security controls in infrastructure and product.
• Drive the operating rhythm for Security TPM, including planning, reviews, incident retrospectives, and continuous improvement cycles.
• Champion automation and scalability in security operations, streamlining processes and embedding security guardrails into DevOps workflows.

What We Need

• B.S. in Computer Science, Information Security, or related technical discipline (or equivalent experience).
• 15+ years of experience in technical program management, engineering leadership, or security program leadership with large-scale infrastructure or cloud environments.
• Proven track record building and leading TPM teams with a focus on security, compliance, or risk management.
• Deep experience in cloud security (AWS, Azure, or GCP), security frameworks (SOC2, ISO27001, FedRAMP), and secure software development practices.
• Demonstrated success in program planning, risk management, and executive communication in high-growth or complex environments.
• Strong cross-functional collaboration skills with executives, engineers, and external stakeholders.
• Comfort leading multi-year security strategies while delivering incremental, measurable improvements.

Preferred Qualifications

• Experience leading incident management, post-incident reviews, and driving systemic fixes through engineering and process improvements.
• Background in DevSecOps, CI/CD security, and embedding controls in automated pipelines.
• Familiarity with compliance and regulatory programs (e.g., GDPR, HIPAA, PCI, FedRAMP) and experience preparing organizations for audits.
• Hands-on familiarity with cloud infrastructure, identity management, and threat detection/response practices.
• Ability to build dashboards, metrics, and reporting systems to track risk posture and program success.

Personal Qualifications
For example: Breadth of relevant functional expertise, Innovator, Builder, Team Leadership, Business Acumen, Thrives in fast paced environment, Trusted Partner

Pay Range Transparency
Databricks is committed to fair and equitable compensation practices. The pay range(s) for this role is listed below and represents the expected salary range for non-commissionable roles or on-target earnings for commissionable roles. Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to job-related skills, depth of experience, relevant certifications and training, and specific work location. Based on the factors above, Databricks anticipates utilizing the full width of the range. The total compensation package for this position may also include eligibility for annual performance bonus, equity, and the benefits listed above. For more information regarding which range your location is in visit our page here.

Local Pay Range

$225,000—$300,000 USD

About Databricks
Databricks is the data and AI company. More than 10,000 organizations worldwide — including Comcast, Condé Nast, Grammarly, and over 50% of the Fortune 500 — rely on the Databricks Data Intelligence Platform to unify and democratize data, analytics and AI. Databricks is headquartered in San Francisco, with offices around the globe and was founded by the original creators of Lakehouse, Apache Spark, Delta Lake and MLflow. To learn more, follow Databricks on Twitter, LinkedIn and Facebook.

Benefits
At Databricks, we strive to provide comprehensive benefits and perks that meet the needs of all of our employees. For specific details on the benefits offered in your region, please visit

Our Commitment to Diversity and Inclusion
At Databricks, we are committed to fostering a diverse and inclusive culture where everyone can excel. We take great care to ensure that our hiring practices are inclusive and meet equal employment opportunity standards. Individuals looking for employment at Databricks are considered without regard to age, color, disability, ethnicity, family or marital status, gender identity or expression, language, national origin, physical and mental ability, political affiliation, race, religion, sexual orientation, socio-economic status, veteran status, and other protected characteristics.

Compliance
If access to export-controlled technology or source code is required for performance of job duties, it is within Employer's discretion whether to apply for a U.S. government license for such positions, and Employer may decline to proceed with an applicant on this basis alone.