Program Manager I, SOX Controls Governance, CISO
- linkCopy link
- emailEmail a friend
Minimum qualifications:
- Bachelor's degree or equivalent practical experience.
- 1 year of program management experience.
- Experience in technology risk, compliance, audit, and controls governance focusing on Sarbanes Oxley (SOX).
- Experience in IT General controls for SOX including user access security, change management, backup recovery and job scheduling.
Preferred qualifications:
- Master's degree or equivalent practical experience.
- Active professional certification of CISA, CISM, CRISC, CGEIT (all ISACA), CISSP, CGRC, CCSP (all ISC2), or CIPP (IAPP).
- Knowledge of regulatory and non regulatory framework (NIST, ISO, PCI DSS, SOC, etc.).
- Understanding of IT risk, how it relates to business risk with the ability to evaluate control effectiveness.
- Ability to use technical problem-solving and issue resolution within ambiguous or highly complex environments.
About the job
A problem isn’t truly solved until it’s solved for all. That’s why Googlers build products that help create opportunities for everyone, whether down the street or across the globe. As a Program Manager at Google, you’ll lead multi-disciplinary projects from start to finish — working with stakeholders to plan requirements, manage project schedules, identify risks, and communicate clearly with cross-functional partners across the company. Your projects will often span offices, time zones, and hemispheres. It's your job to co-ordinate the players and keep them up to date on progress and deadlines.As a part of the Cloud Controls Governance (CCG) team within Risk and Compliance, under the Cloud Chief Information Security Office (CISO) organization, you will be responsible for establishing and maintaining the approach, quality and governance for the entire controls life-cycle applicable to Google Cloud, including development and continuous improvement.
In this role, you will drive Sarbanes-Oxley (SOX) readiness for Google Cloud, focusing on identifying, documenting, and testing internal controls before official auditors arrive. You will be responsible for reviewing cloud infrastructure, understanding control narratives, and performing light testing to ensure controls are "buttoned up" and auditable prior to the official audit. You will act as a bridge between high-level compliance requirements and actionable technical tasks and work closely with engineering and product teams to automate compliance processes and ensure Google Cloud effectively manages risk at scale. Your work ensures that when an audit occurs, the company can provide evidence that its data is accurate and its systems are secure.Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.
Responsibilities
- Lead control development and enhancement efforts, including identifying and educating control owners, defining requirements, assessing maturity and effectiveness, and proposing integrations into continuous monitoring dashboards.
- Collaborate with compliance program teams in readiness activities for upcoming certifications, audits or customer requests for information (RFIs).
- Manage a program portfolio by driving multi-quarter roadmaps, leading new project initiation (scoping, objectives), and tracking execution (milestones, dependencies, risks).
- Detect control gaps or maturity issues and drive the remediation of internal findings to ensure compliance before official audits commence.
- Develop and maintain working relationships with key internal stakeholders and subject matter experts across multiple functions and locations to effectively accomplish goals.
Information collected and processed as part of your Google Careers profile, and any job applications you choose to submit is subject to Google's Applicant and Candidate Privacy Policy.
Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy, Know your rights: workplace discrimination is illegal, Belonging at Google, and How we hire.
If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form.
Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.
To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.