Related Posts
More Posts
Kindly recommend some self help books!
Anyone works at Goodwin? I've been
interested and applying in the last few
weeks, so far, I am intrigued. I'm currently
in the LA area, I'm planning to stay but l'm
open to relocating either SF or the New York offices as well. If any can connect to their
Recuritment or Talent Acquisition Team or
any references, information or
connections! Let me know! I can also be connected on LinkedIn as well!
Additional Posts in Cyber Security Bowl
Views on carbon black as a product?
Any tips or tricks for CSX certification?
Tell me it’s not true.

Anyone working in Pharma industry?
New to Fishbowl?
unlock all discussions on Fishbowl.




I’ve helped people make this move, here is what worked:
Be ready to show how you can connect the dots between technical teams and program management. The key is highlighting how you can juggle multiple projects while keeping them aligned with security priorities.
Your background in Threat and GRC is a huge advantage. Talk about how that helps you understand technical risks, compliance needs, and their business impact-it’s a big plus for a TPM role.
Interview panels usually focus on these-
Project management - How you plan, prioritize, and keep things on track. Have examples ready of managing competing priorities.
Technical knowledge - They’ll test if you can work closely with engineers and understand security challenges.
Leadership - Be ready to share how you influence and manage without direct authority.
Highlight Your ability to speak “technical” and “business”, earn trust with engineers and execs alike, and build processes that actually work for delivering security programs.
Also, practicing situational questions like, “How do you handle delays in a high-stakes security project?” can be super helpful.
Good luck-you’ve got the skills-now just show them how you’ll deliver!
Wow thank you for such a detailed answer! I appreciate the overview especially highlighting my technical strengths. I’ll prepare some scenarios on the project management questions
A few years back yes
You will need a solid project and risk management background
Good level of technical and architecture, if you can link into threat models, attack vectors and controls thats great
Finance always comes up especially given cyber can be seen as a negative investment
Regulations and legal for the area you work in
In general know you NIST frameworks as they are the baseline for most things
While it’s not cyber mario gerard has some good info on technical progamme management. (I have no affiliation)
Do be able to know your limits and say that in an interview. Knowing when to bring in a deep expert is not a bad thing.