Technical Program Manager Risk and Controls Strategy

About the Role

A problem isn’t truly solved until it’s solved for all. That’s why Googlers build products that help create opportunities for everyone, whether down the street or across the globe. As a Technical Program Manager at Google, you’ll use your technical expertise to lead complex, multi-disciplinary projects from start to finish. You’ll work with stakeholders to plan requirements, identify risks, manage project schedules, and communicate clearly with cross-functional partners across the company. You're equally comfortable explaining your team's analyses and recommendations to executives as you are discussing the technical tradeoffs in product development with engineers. The Cloud Controls Oversight (CCO) team is the strategic engine driving the evolution of Google Cloud's risk landscape from reactive monitoring to a proactive, engineering-driven assurance model. As a central control authority, we are re-architecting the control environment at a massive scale, moving beyond traditional compliance to build a sustainable and transparent ecosystem. You will play a pivotal role in this transformation, helping to shift the organization toward a data-driven future where risks are identified and mitigated before they impact the business. In this role, you will leverage deep domain expertise and AI-driven automation to harmonize standards and eliminate operational complexity across the organization. You will deliver high-impact, actionable insights through the new control reports, utilizing advanced key control indicators to detect early warning signals of control degradation. In this role, you will empower global teams with granular, data-driven clarity to drive adoption and effectiveness across the control lifecycle. By facilitating root cause analysis and monitoring remediation efforts, you will enforce operational accountability and ensure Google Cloud meets its regulatory commitments. Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems. The US base salary range for this full-time position is $138,000-$198,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process. Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.

Responsibilities

• Establish and govern the Cloud Controls strategy, using industry-leading frameworks (e.g., NIST SP 800-53) to standardize control adoption and maintain the centralized Governance, Risk, and Compliance (GRC) platform.
• Drive the end-to-end control reporting lifecycle, translating complex risk data into high-impact, actionable insights that influence business strategy and decision-making.
• Be a key driver in engineering organizational resilience by leading Root Cause Analysis (RCA) and accelerating critical risk remediation efforts across different product teams.
• Implement and scale AI-driven automation for controls monitoring, harmonizing control definitions and delivering a unified 'single pane of glass' for real-time risk visibility.
• Serve as a trusted strategic advisor to senior Subject Matter Experts and compliance/risk leadership, leveraging data-driven clarity to accelerate control adoption and enhance the security posture across Google Cloud.

Key skills/competency

• Technical Program Management
• Risk Management
• Controls Strategy
• CISO
• Cloud Security
• Compliance
• NIST 800-53
• GRC
• Root Cause Analysis
• AI Automation