onsite

Technical Program Manager II, Compliance, Google Cloud

Product Manager

Experience in delivering information security or risk management focused projects, including control design, implementation, remediation, and testing.

About the role

Minimum qualifications:

Bachelor's degree in a technical field, or equivalent practical experience.
2 years of experience in program management.
Experience working with established security compliance frameworks and certifications (e.g., SOC 2, ISO 27001, NIST 800-53, HIPAA, PCI DSS, CISSP, CISA, CIPP, ISO or equivalent).

Experience in delivering information security or risk management focused projects, including control design, implementation, remediation, and testing.

Preferred qualifications:

2 years of experience managing cross-functional or cross-team projects.
Experience assessing implementation of product level security controls.
Experience with Governance, Risk, and Compliance (GRC) platforms.
Familiarity with the concepts, architecture, and security/compliance offerings of Google Cloud.
Familiarity with Google's internal GRC systems (e.g., Comply, GGRC).

Responsibilities

Manage the end-to-end lifecycle of certification programs, ensuring timely renewals and successful achievement of new Google Cloud compliance certifications. Leverage GRC tooling for program tracking, evidence collection, and status reporting.
Work deeply with engineering and product teams to integrate compliance requirements into the development lifecycle of Google Cloud products and infrastructure. Provide technical guidance on control implementation.
Assess and mitigate potential compliance impacts of significant technical changes.
Lead the development, documentation, and validation of security and privacy controls within the designated Governance, Risk, and Compliance (GRC) systems to meet new or evolving certification standards.
Track, support, and drive the remediation of identified compliance gaps or audit findings using data and workflows within GRC tools. Develop and monitor metrics to report on remediation progress and effectiveness.

Skills

About the role

Minimum qualifications:

Bachelor's degree in a technical field, or equivalent practical experience.
2 years of experience in program management.
Experience working with established security compliance frameworks and certifications (e.g., SOC 2, ISO 27001, NIST 800-53, HIPAA, PCI DSS, CISSP, CISA, CIPP, ISO or equivalent).

Experience in delivering information security or risk management focused projects, including control design, implementation, remediation, and testing.

Preferred qualifications:

2 years of experience managing cross-functional or cross-team projects.
Experience assessing implementation of product level security controls.
Experience with Governance, Risk, and Compliance (GRC) platforms.
Familiarity with the concepts, architecture, and security/compliance offerings of Google Cloud.
Familiarity with Google's internal GRC systems (e.g., Comply, GGRC).

Responsibilities

Manage the end-to-end lifecycle of certification programs, ensuring timely renewals and successful achievement of new Google Cloud compliance certifications. Leverage GRC tooling for program tracking, evidence collection, and status reporting.
Work deeply with engineering and product teams to integrate compliance requirements into the development lifecycle of Google Cloud products and infrastructure. Provide technical guidance on control implementation.
Assess and mitigate potential compliance impacts of significant technical changes.
Lead the development, documentation, and validation of security and privacy controls within the designated Governance, Risk, and Compliance (GRC) systems to meet new or evolving certification standards.
Track, support, and drive the remediation of identified compliance gaps or audit findings using data and workflows within GRC tools. Develop and monitor metrics to report on remediation progress and effectiveness.