Technical Program Manager, Data Center Security and Compliance

Minimum qualifications:

• Bachelor's degree in a technical field, or equivalent practical experience.
• 8 years of experience in program management with a focus on information and technology compliance and audit programs for hardware or software.
• 5 years of experience in leadership roles with/without direct reports.
• Experience with regulatory requirements, data center operations, risk assessments, internal controls, and security controls.

Preferred qualifications:

• Relevant Certifications such as CISSP, CISA, CISM, or other related certifications.
• Experience in people management.
• Experience in areas like large-scale program management, change management, communication strategy, and Program Manager (PgM) generalist work.
• Strong people and communications skills and open to feedback.
• Attention to detail, time management, and ability to grow in an ambiguous environment.
• Mindset for innovation, continuous improvement and desire to exceed business expectations and ability to travel up to 25% of the time as needed.

About the job

Google's projects, like our users, span the globe and require managers to keep the big picture in focus while being able to dive into the unique engineering challenges we face daily. As a Technical Program Manager at Google, you lead complex, multi-disciplinary engineering projects using your engineering expertise. You plan requirements with internal customers and usher projects through the entire project lifecycle. This includes managing project schedules, identifying risks and clearly communicating them to project stakeholders. You're equally at home explaining your team's analyses and recommendations to executives as you are discussing the technical trade-offs in product development with engineers.
Using your extensive technical and leadership expertise, you manage various Engineering-specific programs and teams.

As a Technical Program Manager for Strategic Policy, Assurance, Risk, and Compliance (SPARC), you will be responsible for driving assurance programs and managing audits across country-level or multi-site domains. These environments often feature evolving regulatory landscapes and unique local requirements. You will play a key role in coordinating proactive assurance activities, managing localized external audits from end-to-end, and translating global risk and compliance frameworks into actionable, localized execution plans for operational teams (the First Line of Defense). This includes facilitating control testing, managing country-specific compliance programs, and partnering with site leads to address identified control gaps or risks. You will also be responsible for synthesizing control evidence and preparing teams for external audit interviews. You will be required to navigate ambiguity and ensure global policies are effectively implemented in a way that meets specific local needs.

Behind everything our users see online is the architecture built by the Technical Infrastructure team to keep it running. From developing and maintaining our data centers to building the next generation of Google platforms, we make Google's product portfolio possible. We're proud to be our engineers' engineers and love voiding warranties by taking things apart so we can rebuild them. We keep our networks up and running, ensuring our users have the best and fastest experience possible.

Responsibilities

• Lead cross-functional development of the data center compliance program, acting as a regional SME to incubate scalable solutions and optimize processes.
• Oversee complex compliance audits and defend the business during critical regulatory escalations, validating assurance outputs for external auditors.
• Resolve chronic, multi-site control failures by partnering with executive leaders to build scalable risk remediation plans and perform follow-up testing.
• Design operational workflows that seamlessly reconcile global control frameworks with local laws, ensuring compliance without sacrificing business velocity.
• Assess infrastructure against standards like FedRAMP, SOC 2, ISO 27001, and PCI DSS, advising internal teams to ensure continuous audit readiness.