Technical Program Manager II, Compliance, CISO

Minimum qualifications:

• Bachelor's degree in a relevant field, or equivalent practical experience.
• 2 years of experience managing projects.
• Experience with risk management and/or compliance in regulated industries (i.e. financial services, public sector, healthcare).

Preferred qualifications:

• 2 years of experience managing cross-functional and/or cross-team projects.
• Engineering project experience, including cross-functional collaboration to achieve common goals.
• Experience with cloud engineering practices.
• Experience with Infrastructure systems, security assessments, and security processes.
• Ability to be comfortable leading in a matrixed organization.

About the job

A problem isn’t truly solved until it’s solved for all. That’s why Googlers build products that help create opportunities for everyone, whether down the street or across the globe. As a Technical Program Manager at Google, you’ll use your technical expertise to lead complex, multi-disciplinary projects from start to finish. You’ll work with stakeholders to plan requirements, identify risks, manage project schedules, and communicate clearly with cross-functional partners across the company. You're equally comfortable explaining your team's analyses and recommendations to executives as you are discussing the technical tradeoffs in product development with engineers.

Our goal is to build a Google that looks like the world around us — and we want Googlers to stay and grow when they join us. As part of our efforts to build a Google for everyone, we build diversity, equity, and inclusion into our work and we aim to cultivate a sense of belonging throughout the company.

As a Security TPM for Cloud Chief Information Security Office (CISO), You will have the opportunity to help set the direction for security in Google Cloud and partner with amazing existing teams across Google. These include existing security teams, privacy teams and engineering teams. You'll help set the focus, direction and impact of this organization with regards to product security. There is an exciting mix of work to be accomplished across multiple security domains. A few examples are: security reviews, security education, web application scanning and testing, vulnerability research and security data analysis all with the goal of highlighting and driving down risk.

Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

The US base salary range for this full-time position is $122,000-$178,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target salaries for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.

Responsibilities

• Lead programs that drive down product security risks in the organization.
• Work with existing teams to understand demand for security services and plan accordingly (i.e. vulnerability management, pen tests, assessments, etc.).
• Establish and drive continuous improvement in security programs across the entire cloud portfolio to reduce security risks.
• Program manage multiple high impact security initiatives that affect internal teams as well as customers.
• Drive product security discussions and negotiations between product, engineering, legal and other cross-functional teams to ensure security and data-protection in alignment.