Program Manager I, SOX Controls Governance, CISO

Google • New York, NY

2d • $105,000 - $151,000

About The Position

A problem isn’t truly solved until it’s solved for all. That’s why Googlers build products that help create opportunities for everyone, whether down the street or across the globe. As a Program Manager at Google, you’ll lead multi-disciplinary projects from start to finish — working with stakeholders to plan requirements, manage project schedules, identify risks, and communicate clearly with cross-functional partners across the company. Your projects will often span offices, time zones, and hemispheres. It's your job to co-ordinate the players and keep them up to date on progress and deadlines. As a part of the Cloud Controls Governance (CCG) team within Risk and Compliance, under the Cloud Chief Information Security Office (CISO) organization, you will be responsible for establishing and maintaining the approach, quality and governance for the entire controls life-cycle applicable to Google Cloud, including development and continuous improvement. In this role, you will drive Sarbanes-Oxley (SOX) readiness for Google Cloud, focusing on identifying, documenting, and testing internal controls before official auditors arrive. You will be responsible for reviewing cloud infrastructure, understanding control narratives, and performing light testing to ensure controls are "buttoned up" and auditable prior to the official audit. You will act as a bridge between high-level compliance requirements and actionable technical tasks and work closely with engineering and product teams to automate compliance processes and ensure Google Cloud effectively manages risk at scale. Your work ensures that when an audit occurs, the company can provide evidence that its data is accurate and its systems are secure.Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

Requirements

• Bachelor's degree or equivalent practical experience.
• 1 year of program management experience.
• Experience in technology risk, compliance, audit, and controls governance focusing on Sarbanes Oxley (SOX).
• Experience in IT General controls for SOX including user access security, change management, backup recovery and job scheduling.

Nice To Haves

• Master's degree or equivalent practical experience.
• Active professional certification of CISA, CISM, CRISC, CGEIT (all ISACA), CISSP, CGRC, CCSP (all ISC2), or CIPP (IAPP).
• Knowledge of regulatory and non regulatory framework (NIST, ISO, PCI DSS, SOC, etc.).
• Understanding of IT risk, how it relates to business risk with the ability to evaluate control effectiveness.
• Ability to use technical problem-solving and issue resolution within ambiguous or highly complex environments.

Responsibilities

• Lead control development and enhancement efforts, including identifying and educating control owners, defining requirements, assessing maturity and effectiveness, and proposing integrations into continuous monitoring dashboards.
• Collaborate with compliance program teams in readiness activities for upcoming certifications, audits or customer requests for information (RFIs).
• Manage a program portfolio by driving multi-quarter roadmaps, leading new project initiation (scoping, objectives), and tracking execution (milestones, dependencies, risks).
• Detect control gaps or maturity issues and drive the remediation of internal findings to ensure compliance before official audits commence.
• Develop and maintain working relationships with key internal stakeholders and subject matter experts across multiple functions and locations to effectively accomplish goals.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level