Lead Technical Program Manager, Information Security Management System
- linkCopy link
- emailEmail a friend
- Health, dental, vision, life, disability insurance
- Retirement Benefits: 401(k) with company match
- Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment
- Sick Time: 40 hours/year (statutory, where applicable); 5 days/event (discretionary)
- Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks
- Baby Bonding Leave: 18 weeks
- Holidays: 13 paid days per year
Minimum qualifications:
- Bachelor's degree in a technical field, or equivalent practical experience.
- 8 years of experience in technical program management, managing cross-functional engineering or security programs.
Preferred qualifications:
- Experience mapping complex regulatory requirements to technical implementations in modern software development and infrastructure environments.
- Experience managing compliance or GRC frameworks (e.g., ISO 27001, SOC2, NIS2) across a large and federated product portfolio.
- Understanding of information security principles, cloud architectures, and enterprise control frameworks.
- Track record of driving large-scale, cross-organizational initiatives, defining governance structures, and establishing accountability models in a federated or matrixed corporate environment.
- Exceptional executive presence and influencing skills, with the ability to negotiate, untangle complex organizational problems, and drive alignment with executive engineering leaders (Director/VP level) without direct reporting lines.
About the job
A problem isn’t truly solved until it’s solved for all. That’s why Googlers build products that help create opportunities for everyone, whether down the street or across the globe. As a Technical Program Manager at Google, you’ll use your technical expertise to lead complex, multi-disciplinary projects from start to finish. You’ll work with stakeholders to plan requirements, identify risks, manage project schedules, and communicate clearly with cross-functional partners across the company. You're equally comfortable explaining your team's analyses and recommendations to executives as you are discussing the technical tradeoffs in product development with engineers.
Google's Information Security Management System (ISMS) and common controls are the foundational underpinning for 400+ products to meet compliance obligations with several critical regulations and standards.
This is a unique opportunity to re-imagine the security compliance function from the ground up, establishing a scalable, data-driven, and AI-enabled model. Concurrently in the short term, we will ensure Google consistently and efficiently fulfills all its immediate obligations.
As the Lead Technical Program Manager, you will be the primary bridge between our centralized compliance function and Google’s vast ecosystem of Product Areas (e.g., Search, YouTube, Android, Cloud). While many security controls are central, a significant portion of our compliance posture relies on federated people, processes, and technologies spanning 400+ products. You will design and implement the engagement frameworks, governance structures, and accountability models necessary to scale compliance across these federated environments. This requires a unique blend of deep technical security acumen and exceptional executive influencing skills to drive alignment and accountability without direct authority.
The US base salary range for this full-time position is $192,000-$285,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.Responsibilities
- Establish clear responsibility and accountability models for federated controls across Google's product areas.
- Drive the structure and execution of continuous, cross-functional engagement with product area leaders. Act as the central compliance ambassador, ensuring ISMS requirements are integrated seamlessly into engineering roadmaps.
- Partner with security and engineering teams to ensure local controls meet regulatory (ISO, SOC, NIS2) standards. Guide product areas through complex audit preparations, facilitate evidence collection, and help defend federated implementations to external auditors.
- Collaborate closely with local risk teams. Identify synergies, converge redundant efforts, and amplify a unified approach to product area security risk and compliance reporting to reduce friction for engineering teams.
- Leverage your technical background to deeply understand team architectures and operations. Translate central compliance and regulatory mandates into practical, engineer-friendly technical requirements.
Information collected and processed as part of your Google Careers profile, and any job applications you choose to submit is subject to Google's Applicant and Candidate Privacy Policy.
Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy, Know your rights: workplace discrimination is illegal, Belonging at Google, and How we hire.
If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form.
Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.
To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.