Technical Program Manager, Data Center Security and Compliance

MINIMUM QUALIFICATIONS:

* Bachelor's degree in a technical field, or equivalent practical experience.

* 8 years of experience in program management with a focus on information and

technology compliance and audit programs for hardware or software.

* 5 years of experience in leadership roles with/without direct reports.

* Experience with regulatory requirements, data center operations, risk

assessments, internal controls, and security controls.

PREFERRED QUALIFICATIONS:

* Relevant Certifications such as CISSP, CISA, CISM, or other related

certifications.

* Experience in people management.

* Experience in areas like large-scale program management, change management,

communication strategy, and Program Manager (PgM) generalist work.

* Strong people and communications skills and open to feedback.

* Attention to detail, time management, and ability to grow in an ambiguous

environment.

* Mindset for innovation, continuous improvement and desire to exceed business

expectations and ability to travel up to 25% of the time as needed.

ABOUT THE JOB:

Google's projects, like our users, span the globe and require managers to keep

the big picture in focus while being able to dive into the unique engineering

challenges we face daily. As a Technical Program Manager at Google, you lead

complex, multi-disciplinary engineering projects using your engineering

expertise. You plan requirements with internal customers and usher projects

through the entire project lifecycle. This includes managing project schedules,

identifying risks and clearly communicating them to project stakeholders. You're

equally at home explaining your team's analyses and recommendations to

executives as you are discussing the technical trade-offs in product development

with engineers.

Using your extensive technical and leadership expertise, you manage various

Engineering-specific programs and teams.

As a Technical Program Manager for Strategic Policy, Assurance, Risk, and

Compliance (SPARC), you will be responsible for driving assurance programs and

managing audits across country-level or multi-site domains. These environments

often feature evolving regulatory landscapes and unique local requirements. You

will play a key role in coordinating proactive assurance activities, managing

localized external audits from end-to-end, and translating global risk and

compliance frameworks into actionable, localized execution plans for operational

teams (the First Line of Defense). This includes facilitating control testing,

managing country-specific compliance programs, and partnering with site leads to

address identified control gaps or risks. You will also be responsible for

synthesizing control evidence and preparing teams for external audit interviews.

You will be required to navigate ambiguity and ensure global policies are

effectively implemented in a way that meets specific local needs.

Behind everything our users see online is the architecture built by the

Technical Infrastructure team to keep it running. From developing and

maintaining our data centers to building the next generation of Google

platforms, we make Google's product portfolio possible. We're proud to be our

engineers' engineers and love voiding warranties by taking things apart so we

can rebuild them. We keep our networks up and running, ensuring our users have

the best and fastest experience possible.

Individual pay is determined by factors including job-related skills,

experience, and relevant education or training.

US: $192000 - $278000 (USD) + 20% bonus target + equity + benefits

Learn more about benefits at Google

[https://www.google.com/about/careers/applications/benefits/].

RESPONSIBILITIES:

* Lead cross-functional development of the data center compliance program,

acting as a regional SME to incubate scalable solutions and optimize

processes.

* Oversee complex compliance audits and defend the business during critical

regulatory escalations, validating assurance outputs for external auditors.

* Resolve chronic, multi-site control failures by partnering with executive

leaders to build scalable risk remediation plans and perform follow-up

testing.

* Design operational workflows that seamlessly reconcile global control

frameworks with local laws, ensuring compliance without sacrificing business

velocity.

* Assess infrastructure against standards like FedRAMP, SOC 2, ISO 27001, and

PCI DSS, advising internal teams to ensure continuous audit readiness.