Technical Program Manager I, Security Compliance

About this role

Technical Program Manager I, Security Compliance

Google

Job Description

Job Title: Senior Technical Program Manager I, Security and Compliance. Location: Sunnyvale, California, USA

Job Type: Full-time

Responsibilities:

Security and Compliance Programs

• Own and manage cross-functional security and compliance roadmaps across:
• Google Distributed Cloud Air-Gapped (GDCag)
• Google Distributed Cloud Connected (GDCc)
• Gemini on GDC Connected (GGC)
• Drive programs that support sovereign, defense, and regulated enterprise certifications, including IL5/IL6, FedRAMP, and FIPS.
• Coordinate security and accreditation initiatives from architectural planning through audit readiness and release approval;
• Work with engineering, security, compliance, product, and operations teams to resolve technical and program-level challenges.

Program Execution and Security Integration

• Integrate security and compliance requirements into software and hardware release processes.
• Develop and manage:
• Master execution plans
• Dependency maps
• Risk registers
• Executive readiness reviews
• Establish security and compliance checkpoints throughout the product lifecycle.
• Promote shift-left security practices, including early security assessments and secure-by-design reviews.

Technical Security and Infrastructure

• Work with engineering and security architects across the Google Distributed Cloud technology stack, including:
• Bare-metal servers
• GPU and AI serving infrastructure
• Kubernetes and Google Kubernetes Engine (GKE)
• Linux operating systems
• Networking and storage
• Key Management Systems (KMS) and Hardware Security Modules (HSMs)
• Identity and Access Management (IAM)
• Zero-trust boundary controls

Cryptographic Modernization and Vulnerability Management

• Drive Post-Quantum Cryptography (PQC) migration initiatives aligned with CNSA 2.0 and NIST SP 800-208.
• Lead continuous vulnerability management and CVE remediation programs.
• Coordinate vulnerability remediation service-level agreements (SLAs).
• Drive software bill of materials (SBOM) and secure software and firmware supply chain workflows.
• Adapt security processes for disconnected and hybrid cloud environments.
• Support automated SecAssure compliance controls.

Cross-Functional Collaboration

• Align Engineering, Security, Compliance, Product, and Sovereign Operations (SovOps) stakeholders.
• Resolve complex technical trade-offs.
• Ensure predictable and audit-ready product releases.
• Communicate program progress, risks, and readiness to relevant stakeholders.

Qualifications:

• Bachelor's degree in a technical field or equivalent practical experience.
• At least 8 years of experience in program management.
• Experience with security assessments;
• Experience with security controls.

Preferred:

• At least 8 years of experience managing cross-functional or cross-team projects.
• Experience guiding cloud, infrastructure, or enterprise products through:
• Regulatory compliance assessments
• Audit readiness
• Continuous compliance monitoring
• Familiarity with compliance frameworks and requirements, including DoD IL5/IL6, FedRAMP High, NIST, ISO, and regional data sovereignty frameworks.
• Experience working in cleared national security environments with an active US Government security clearance.
• Experience leading vulnerability assessment and management programs across large-scale software or hardware environments.
• Knowledge of vulnerability scanning coverage, triage, remediation tracking, and exception governance.
• Experience integrating shift-left security assessments into product development, including:
• Secure-by-design reviews
• Penetration testing
• Cryptographic modernization
• Relevant professional certifications, such as CISSP, CISM, or CCSP.

Salary and Compensation:

Salary disclosed

• Base salary: $192,000 to $278,000 USD
• Target bonus: 20%
• Additional compensation: Equity and benefits

Individual compensation depends on job-related skills, experience, education, and training.

Application Instructions:

Apply through Google's official careers website.

The application and recruitment process is subject to Google's Applicant and Candidate Privacy Policy.

Google also provides an accommodation request form for applicants who need assistance during the recruitment process.

Additional Information:

• The position is based in Sunnyvale, California, USA.
• English proficiency is required for this role.
• Google is an equal opportunity and affirmative action employer;
• Google does not accept unsolicited resumes from recruitment agencies.
• The role supports security and compliance programs for public-sector, defense, intelligence, and regulated enterprise customers globally.