Technical Program Manager, Technology Cyber Security

Minimum qualifications:

• Bachelor's degree in a technical field or equivalent practical experience.
• 5 years of experience utilizing cyber security risk frameworks (e.g., NIST CSF) and conducting risk assessments.
• 5 years of experience in technical program management, cyber security, risk management, with data center operational technology (OT), specifically regarding building management systems (BMS) and power monitoring systems (PMS).
• 5 years of experience with networking systems and the security issues of OT environments, including Industrial Control Systems (ICS), Supervisory Control and Data Acquisition (SCADA), and real-time controls.

Preferred qualifications:

• 10 years of experience with security systems, critical infrastructure protection, or a related field.
• Experience creating business and product requirements documents (Business Requirements Document (BRD) and Product Requirements Document (PRD)) and defining success metrics for technical programs.
• Knowledge of emerging cyber security system technologies, trends, and vulnerability management processes (including threat modeling and remediation).
• Understanding of Tier-1 OT security vendor platforms, network visibility tools, and threat detection solutions.
• Excellent program management skills with an ability to influence cross-functional teams without direct authority.

About the job:

A problem isn’t truly solved until it’s solved for all. That’s why Googlers build products that help create opportunities for everyone, whether down the street or across the globe. As a Technical Program Manager at Google, you’ll use your technical expertise to lead complex, multi-disciplinary projects from start to finish. You’ll work with stakeholders to plan requirements, identify risks, manage project schedules, and communicate clearly with cross-functional partners across the company. You're equally comfortable explaining your team's analyses and recommendations to executives as you are discussing the technical tradeoffs in product development with engineers.

The Compliance, Security, and Risk Management (CSRM) team is dedicated to delivering the safest and most resilient technical infrastructure in the world.

• Health, dental, vision, life, disability insurance
• Retirement Benefits: 401(k) with company match
• Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment
• Sick Time: 40 hours/year (statutory, where applicable); 5 days/event (discretionary)
• Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks
• Baby Bonding Leave: 18 weeks
• Holidays: 13 paid days per year

Responsibilities:

• Oversee the risk and compliance aspects of data center operational technology (OT) cyber security, specifically covering building management systems (BMS), power monitoring systems (PMS), and the associated networking equipment they communicate with.
• Lead a comprehensive program to quantify and reduce cyber risks to data center systems, ensuring alignment with business risk appetite and facilitating decision-making for business leaders.
• Orchestrate effectively across 24x7 operations, DCTS, and DC operations to drive sustainable program effectiveness and ensure security strategies are integrated into daily operations.
• Analyze security data to identify trends, manage vulnerability assessments and threat modeling, and utilize threat detection solutions to maintain a robust security posture.