Work deeply with engineering and product teams to integrate compliance requirements into the development lifecycle of Google Cloud products and infrastructure. Provide technical guidance on control implementation.
Collaborate with product teams to ensure new services, features, and infrastructure changes are onboarded effectively for compliance. Assess and mitigate potential compliance impacts of significant technical changes.
Lead the development, documentation, and validation of security and privacy controls within the designated GRC systems to meet new or evolving certification standards.
Track, support, and drive the remediation of identified compliance gaps or audit findings. Develop and monitor metrics to report on remediation progress and effectiveness.
Minimum qualifications
Bachelor's degree or equivalent practical experience.
5 years of experience in technical program management.
Experience with established security compliance frameworks and certifications (e.g., SOC 2, ISO 27001, NIST 800-53, C5, PCI DSS, or equivalent).
Preferred qualifications
Relevant professional certifications including CISSP, CISA, CIPP, ISO lead implementer, PCI ISA, or related information security certifications.
Experience in delivering information security or risk management focused projects, including control design, implementation, and testing.
Experience assessing implementation of product level security controls.
Experience with Governance, Risk, and Compliance (GRC) platforms.
Familiarity with Google's internal GRC systems (e.g., Comply, GGRC).
Familiarity with the concepts, architecture, and security/compliance offerings of Google Cloud.
Bachelor's degree or equivalent practical experience.
5 years of experience in technical program management.
Experience with established security compliance frameworks and certifications (e.g., SOC 2, ISO 27001, NIST 800-53, C5, PCI DSS, or equivalent).
