Sr. Program Manager, Security Strategy & Enablement

Sandisk is building a world-class Global Security organization. The Sr. Program Manager, Security Strategy & Enablement is a newly created role reporting to the Vice President, Chief Security Officer. This role establishes the strategy, governance, planning and business operations foundation that the organization needs to mature its programs and deliver on its commitments.

Security Strategy & Enablement is a shared function that supports every Global Security pillar. The role brings structure and consistency across three areas:

·         Program & Finance. Program management office (PMO), budget and finance, annual operating plan (AOP), forecasting, operating expense (OPEX) management and RFPs.

·         Governance & Assurance. Security governance, risk and compliance, policies and procedures, and management action plans (MAPs) from internal audit and external assessments.

·         Capability & Experience. Security training and awareness, and people experience initiatives for the Global Security team.

The role also supports security data and metrics, and business continuity and crisis management. The ideal candidate is a senior program manager with corporate security or risk experience who can align teams, track execution against strategic goals, and run the business operations of a global function.

Key Responsibilities

1. Security Strategy & Governance

·         Partner with the CSO and leadership team to develop and maintain the Global Security strategy, multi-year roadmap, strategic objectives and key initiatives.

·         Establish the organization's governance model: operating rhythm, leadership meeting cadence, decision rights, charters and escalation paths.

·         Lead the development, review and lifecycle management of global security policies, standards and procedures; maintain a policy library with clear owners, review dates and version control.

·         Maintain the security risk and compliance register; track regulatory and policy obligations across regions with Legal, Ethics & Compliance and functional owners.

·         Track execution and progress against strategic goals and commitments; identify gaps, risks and dependencies early and drive corrective action.

2. Program Management Office (PMO)

·         Build and run the Global Security PMO: intake and prioritization of projects, a single portfolio view, simple standard templates and consistent status reporting.

·         Manage cross-team programs end to end, including scope, schedule, resources, risks, dependencies and stakeholder communication.

·         Track projects, milestones and action items using the team's standard project tracking tools; keep the portfolio current and visible to leadership.

·         Lead the program to implement recommendations from the external security assessment; track each recommendation to closure and report progress to the CSO.

·         Coordinate the work of contracted project managers and consultants supporting Global Security projects.

3. Budget, Finance & Business Operations

·         Lead the annual operating plan (AOP) and budget process for Global Security in partnership with Finance; consolidate pillar inputs into one plan.

·         Manage OPEX tracking, monthly forecasting, accruals and variance reporting; flag risks and opportunities to the CSO.

·         Partner with Procurement on RFPs, supplier selection, contract renewals, purchase requests and invoice follow-up for security services and technology.

·         Support headcount planning, requisitions, contingent workforce requests and onboarding logistics for the organization.

·         Manage business operations for the organization, including leadership offsites, quarterly business reviews and internal communications.

4. Governance & Assurance

·         Serve as the Global Security point of contact for Internal Audit and external assessments; coordinate requests, evidence and responses.

·         Own the tracking of management action plans (MAPs) and assessment findings; drive owners to on-time closure and report status to leadership and Internal Audit.

·         Run periodic self-assessments and program maturity reviews against recognized practice (for example, ASIS standards and guidelines) and the organization's own policies.

5. Security Data & Metrics

·         Define and maintain a security scorecard with KPIs and KRIs across all pillars (for example, incident trends, program milestones, audit closure, training completion, budget performance).

·         Produce monthly and quarterly reporting for the CSO, executive leadership and board-level updates; turn data into clear insights and recommendations.

·         Work with GSOC, Security Operations and IT to improve data quality and build dashboards (for example, in Power BI or Excel).

6. Training, Awareness & People Experience

·         Lead the global security training and awareness program: annual plan, content, delivery channels, completion tracking and effectiveness measures.

·         Partner with Investigations & Intelligence, Security Operations and HR on required training, such as workplace violence prevention, emergency response and security awareness.

·         Coordinate onboarding, development and recognition initiatives that strengthen engagement and team culture across Global Security.

7. Business Continuity & Crisis Management

·         Support the security role in business continuity and crisis management, including plans, playbooks, contact lists and escalation procedures.

·         Coordinate exercises and tabletop drills with GSOC, site leadership and Business Continuity partners; track after-action items to closure.

8. Cross-Functional Partnership

This role connects Global Security with the rest of Sandisk. Key partners include:

·         Global Security pillars. GSOC and Security Operations, Investigations & Intelligence, Executive Protective Services and Security Systems & Technology, for planning, reporting, budgets and program delivery.

·         Finance and Procurement. AOP, forecasting, OPEX management, RFPs, supplier contracts and purchasing.

·         Legal, Ethics & Compliance and Internal Audit. Policy governance, regulatory obligations, audit requests and management action plans.

·         Human Resources and Talent Acquisition. Headcount planning, requisitions, training and people experience initiatives.

·         Business Continuity, Facilities and Real Estate, IT and Information Security, and Communications. Crisis management, site programs, security technology data and organization-wide communications.

Qualifications

Required

·         Bachelor's degree in Business Administration, Security Management, Criminal Justice, Finance or a related field, or equivalent experience.

·         10+ years of experience in program management, business operations or strategy roles, including 5+ years managing cross-functional programs in a corporate security, risk, compliance or similar environment.

·         Proven experience building governance structures, policies and procedures, and operating rhythms for a function.

·         Hands-on experience with budget planning, forecasting and expense tracking in partnership with Finance.

·         Experience coordinating internal audit or external assessment responses and driving action plans to closure.

·         Strong organizational skills and the ability to manage many priorities and stakeholders at once.

·         Excellent written and verbal communication skills, including preparing executive reports and presentations.

·         Hands-on experience tracking projects, milestones and action items, and producing clear status reports and leadership presentations.

·         Ability to work on-site in Milpitas, CA, and travel domestically and internationally (up to 10%).

Preferred

·         Advanced degree (MBA or MS) in a relevant discipline.

·         Experience in a global corporate security organization at a technology, semiconductor or manufacturing company.

·         Experience running a PMO or portfolio management function.

·         Experience with security training and awareness programs, business continuity or crisis management.

·         Experience building metrics dashboards (for example, Power BI).

·         Professional certifications such as Project Management Professional (PMP), Certified Protection Professional (CPP) or a business continuity credential, or the ability to attain them.

Leadership Competencies

·         Builder. Creates structure, standards and repeatable processes where none exist.

·         Execution Focused. Turns strategy into plans, tracks commitments and drives work to completion.

·         Trusted Partner. Earns credibility with the CSO, security leaders, Finance, Legal and HR.

·         Clear Communicator. Explains status, risks and recommendations simply and accurately.

·         Collaborative. Works across teams, regions and cultures to align priorities.