Technical Program Manager, Technology Cyber Security
- linkCopy link
- emailEmail a friend
Health, dental, vision, life, disability insurance
Retirement Benefits: 401(k) with company match
Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment
Sick Time: 40 hours/year (statutory, where applicable); 5 days/event (discretionary)
Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks
Baby Bonding Leave: 18 weeks
Holidays: 13 paid days per yearNote: By applying to this position you will have an opportunity to share your preferred working location from the following: Redmond, WA, USA; Council Bluffs, IA, USA; Midlothian, TX, USA; Kirkland, WA, USA; New York, NY, USA; Sunnyvale, CA, USA.
Minimum qualifications:
- Bachelor's degree in a technical field or equivalent practical experience.
- 5 years of experience utilizing cyber security risk frameworks (e.g., NIST CSF) and conducting risk assessments.
- 5 years of experience in technical program management, cyber security, risk management, with data center operational technology (OT), specifically regarding building management systems (BMS) and power monitoring systems (PMS).
- 5 years of experience with networking systems and the security issues of OT environments, including ICS, SCADA, and real-time controls.
Preferred qualifications:
- 10 years of experience with security systems, critical infrastructure protection, or a related field.
- Experience creating business and product requirements documents (BRD & PRD) and defining success metrics for technical programs.
- Knowledge of emerging cyber security system technologies, trends, and vulnerability management processes (including threat modeling and remediation).
- Understanding of Tier-1 OT security vendor platforms, network visibility tools, and threat detection solutions.
- Excellent program management skills with an ability to influence cross-functional teams without direct authority.
About the job
A problem isn’t truly solved until it’s solved for all. That’s why Googlers build products that help create opportunities for everyone, whether down the street or across the globe. As a Technical Program Manager at Google, you’ll use your technical expertise to lead complex, multi-disciplinary projects from start to finish. You’ll work with stakeholders to plan requirements, identify risks, manage project schedules, and communicate clearly with cross-functional partners across the company. You're equally comfortable explaining your team's analyses and recommendations to executives as you are discussing the technical tradeoffs in product development with engineers.
The Compliance, Security, and Risk Management (CSRM) team is dedicated to delivering the safest and most resilient technical infrastructure in the world. As a Technical Program Manager for operational technology (OT) cyber security, you will lead the charge in protecting the assets that support Google's data centers. You will be responsible for the risk and compliance aspects of OT, including building management systems (BMS) and power monitoring systems (PMS). By collaborating with 24x7 operations, data center technical services (DCTS), and data center operations, you will identify enterprise risks and develop industry-leading programs that integrate safety and security into the creative process, ensuring our program elements align with the business risk appetite.
Behind everything our users see online is the architecture built by the Technical Infrastructure team to keep it running. From developing and maintaining our data centers to building the next generation of Google platforms, we make Google's product portfolio possible. We're proud to be our engineers' engineers and love voiding warranties by taking things apart so we can rebuild them. We keep our networks up and running, ensuring our users have the best and fastest experience possible.
The US base salary range for this full-time position is $156,000-$229,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.
Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.
Responsibilities
- Oversee the risk and compliance aspects of data center operational technology (OT) cyber security, specifically covering building management systems (BMS), power monitoring systems (PMS), and the associated networking equipment they communicate with.
- Lead a comprehensive program to quantify and reduce cyber risks to data center systems, ensuring alignment with business risk appetite and facilitating decision-making for business leaders.
- Orchestrate effectively across 24x7 operations, DCTS, and DC operations to drive sustainable program effectiveness and ensure security strategies are integrated into daily operations.
- Analyze security data to identify trends, manage vulnerability assessments and threat modeling, and utilize threat detection solutions to maintain a robust security posture.
Information collected and processed as part of your Google Careers profile, and any job applications you choose to submit is subject to Google's Applicant and Candidate Privacy Policy.
Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy, Know your rights: workplace discrimination is illegal, Belonging at Google, and How we hire.
If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form.
Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.
To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.