Technical Program Manager, Data Center Security and Compliance

About the Role: Technical Program Manager, Data Center Security and Compliance at Google

As a Technical Program Manager at Google, you will leverage your technical expertise to spearhead complex, multi-disciplinary projects from inception to completion. This role involves close collaboration with stakeholders to define requirements, identify potential risks, manage project timelines, and ensure transparent communication with cross-functional partners across Google. You will be adept at articulating team analyses and recommendations to executives, as well as engaging in detailed technical discussions on product development tradeoffs with engineers.

Google's Data Center, Compliance, Strategy and Risk Management (CSRM) Team

The CSRM team is dedicated to safeguarding the personnel and critical assets across Google’s extensive global infrastructure. Joining this team means fostering a culture where security, risk management, and resiliency are inherently integrated into every aspect of Google's operations, including the creative processes. You will play a crucial role in continuously identifying, assessing, and monitoring enterprise-wide risks that could impact business activities, providing essential insights for leaders to make informed decisions. This position requires collaboration with various cross-functional teams to devise strategies and implement industry-leading programs that ensure sustained effectiveness. You will work closely with data center teams and partners from other organizations, including business units, internal audit, and legal.

Key Responsibilities

• Coordinate and execute onsite audits (customer, insurance, regulatory) to ensure data center programs adhere to compliance expectations.
• Drive the tactical evolution of the compliance program by engaging in cross-functional collaboration to refine or retire organizational processes.
• Assess the efficacy of current controls against globally recognized standards such as FedRAMP, SOC 2, ISO 27001, and PCI DSS.
• Partner with teams to develop comprehensive remediation plans, address control deficiencies, and conduct follow-up testing to validate corrective actions.
• Act as a trusted advisor on risk management and security best practices, ensuring infrastructure-specific controls are meticulously documented and integrated into existing frameworks.

Minimum Qualifications

• Bachelor's degree in a technical field, or equivalent practical experience.
• 5 years of experience in program management.
• Experience with information and technology compliance and audit programs for hardware or software.
• Experience in areas such as program management, change management, communication strategy, and PgM generalist work.

Preferred Qualifications

• Certifications such as CISSP, CISA, CISM, or related industry credentials.
• 5 years of experience managing complex cross-functional or cross-team projects.
• Ability to travel up to 25% of the time as required.
• Demonstrated ability to manage multiple projects and workstreams effectively in dynamic environments.

Compensation Information

The US base salary range for this full-time position is $156,000-$229,000, complemented by bonus, equity, and comprehensive benefits. Salary ranges are determined by role, level, and location. Individual pay within this range is influenced by work location and additional factors, including job-related skills, experience, and relevant education or training. Further details regarding the specific salary range for your preferred location will be provided by your recruiter during the hiring process. Note that the compensation details reflect base salary only, excluding bonus, equity, or benefits, which are detailed further here.

Working Locations

By applying, you can specify your preferred working location from the following options: Council Bluffs, IA, USA; Midlothian, TX, USA; Omaha, NE, USA; The Dalles, OR, USA; Moncks Corner, SC 29461, USA; Reston, VA, USA; Columbus, OH, USA.

Key Skills/Competency

• Program Management
• Data Center Security
• Compliance Audits
• Risk Management
• Information Security
• Cross-functional Leadership
• FedRAMP, SOC 2, ISO 27001, PCI DSS
• Change Management
• Technical Communication
• Control Assessment