Senior TPM, IT & Security Alliance (m,f,x)

<h2><strong>The role</strong></h2> <p>We are seeking a seasoned <strong>Senior Technical Program Manager (Sr TPM)</strong> to lead cross-functional, enterprise-wide initiatives across <strong>IT, Security, and Governance</strong>.<br>In this pivotal role, you will drive execution of the <strong>2026 Security Tribe plan</strong> — spanning <strong>Financial &amp; Technical Risk Mitigation, Zero Trust, Compliance Automation, and Operational Resilience</strong> — ensuring that HelloFresh maintains a secure, compliant, and scalable technology foundation.</p> <p>You will collaborate closely with the <strong>Security Leadership Team</strong>, <strong>Finance</strong>, <strong>Legal</strong>, <strong>AI Governance</strong>, and <strong>Engineering Foundations</strong> to align programs with business priorities.<br>A strong interest in <strong>applying AI and automation pragmatically</strong> — for example to streamline workflows, reporting, or incident response — will enable you to accelerate impact while keeping the focus on measurable domain outcomes.</p> <p>Above all, we are looking for people who will&nbsp;<strong>make HelloFresh</strong>&nbsp;<strong>better.</strong>&nbsp;We believe there are many different ways of developing skills and we love diverse experiences! So even if you don’t “tick all the boxes” but think you’d thrive in this role, we would really like to learn more about you.</p> <h2><strong>What you’ll do</strong></h2> <h4><strong>Drive Strategic Programs &amp; Transformation</strong></h4> <ul> <li>Lead end-to-end execution of the <strong>Financial &amp; Technical Risk Mitigation Program</strong>, integrating regulatory, security, and business-continuity controls across markets.</li> <li>Oversee <strong>Zero Trust and Conditional Access</strong> rollout (YubiKey 2FA, ZPA-as-Code, device-posture enforcement).</li> <li>Govern delivery for key initiatives such as <strong>Kubernetes Guardrails</strong>, <strong>Patch Management</strong>, and <strong>Vulnerability Lifecycle Automation</strong>, ensuring alignment to Group Objectives.</li> <li>Track and report measurable KPIs (&lt; 0.1 % revenue exposure, ≥ 90 % SLA adherence, ≥ 95 % Conditional-Access coverage).</li> </ul> <h4><strong>Govern Execution &amp; Risk Visibility</strong></h4> <ul> <li>Establish and maintain unified program roadmaps, OKR alignment, and dependency management across Security and IT squads.</li> <li>Lead quarterly <strong>Cybersecurity Risk Register cycles</strong>, ensuring accountability and progress transparency.</li> <li>Build dashboards connecting program milestones, audit readiness, and risk posture for leadership visibility.<br><br></li> </ul> <h4><strong>Enable Automation &amp; Intelligent Operations</strong></h4> <ul> <li>Identify opportunities to <strong>automate reporting, evidence collection, and escalation workflows</strong> using existing platforms and emerging AI-driven tools.</li> <li>Collaborate with the <strong>AI Governance</strong> and <strong>Data Science</strong> teams to safely embed automation in compliance, risk, and monitoring processes.</li> <li>Promote adoption of AI-assisted insights where they measurably improve efficiency or decision quality — without compromising governance or control.<br><br></li> </ul> <h4><strong>Stakeholder Leadership &amp; Communication</strong></h4> <ul> <li>Act as the connective tissue between Security, IT, Finance, Legal, and Data teams; facilitate cross-alliance planning and steering reviews.</li> <li>Deliver clear, data-driven progress updates, risk briefings, and ROI dashboards for senior leadership and board stakeholders.</li> </ul> <h2><strong>What you’ll bring</strong></h2> <ul> <li>Proven experience driving large-scale, multi-domain programs linking Security, IT Operations, and Business functions.</li> <li>5 + years of program leadership experience, including enterprise-level Security or IT initiatives.</li> <li>Working knowledge of&nbsp;<strong>security frameworks</strong> (NIS2, GDPR, PCI-DSS, EU AI Act), cloud security, identity management, and infrastructure operations.</li> <li>Proficiency with platforms such as&nbsp;<strong>Jira</strong>, <strong>Wiz</strong>, <strong>ZScaler</strong>, <strong>Entra ID</strong>, and GRC systems.</li> <li>Awareness of how&nbsp;<strong>AI and automation</strong> can enhance governance, risk, and operational processes.</li> <li>Demonstrated ability to influence senior stakeholders and foster collaboration across departments. Ability to navigate ambiguity and align diverse stakeholders around common outcomes.</li> <li>A growth mindset with curiosity about <strong>Generative AI and agentic automation</strong>, coupled with a pragmatic understanding of where these tools create real value.</li> </ul> <h2><strong>What we offer</strong></h2> <p>Elevate your lifestyle! Join one of Europe's fastest-growing tech powerhouses in a dynamic phase of expansion.</p> <ul> <li>Immerse yourself in a diverse global community of 90+ nationalities.</li> <li>Enjoy a competitive compensation package that goes beyond the norm, with perks like a HelloFresh- subsidized Pension Scheme, Berlin relocation support, and a Hybrid working model.</li> <li>Elevate your lifestyle with exclusive discounts on your weekly HelloFresh box and office meals.</li> <li>Invest in your growth with a German language learning budget, and access to the HelloFresh Academy.</li> <li>Plus, we've got your well-being covered with mental health support, transportation perks, and working-parent-friendly benefits. From our 24/7 gym access,wellbeing platforms like Headspace and Spill, to sabbatical leave options, HelloFresh is not just a workplace; it's a lifestyle of perks and possibilities!</li> </ul> <p>&nbsp;</p><div class="content-conclusion"><p>HelloFresh is committed to the principles of equal employment opportunity and providing reasonable accommodations to candidates with disabilities. If you need an accommodation during the application process, please reach out to us at:</p> <p>Europe: EUaccommodations@hellofresh.com.<br>APAC: APACaccommodations@hellofresh.com<br>United States: USCandidateAccommodations@hellofresh.com<br>Canada: CAaccommodations@hellofresh.com</p></div>