Program Manager III, Operational Technology Security, Data Centers

Google•Atlanta, GA

11h•$159,000 - $230,000

About The Position

As a Program Manager for Operational Technology (OT) Cybersecurity, you will support vulnerability management programs across the operational technology that supports critical infrastructure. These environments have tight downtime limits, safety concerns, and complex vendor dependencies, so standard IT remediation practices often do not apply. You will manage vulnerability projects, including end-to-end remediation, metrics development, and exceptions reporting. You will also drive initial triage of Common Vulnerabilities and Exposures (CVEs), assessing exploitability in an OT context, checking applicability against the asset inventory, and coordinating with the OT Security Review Working Group to deliberate on severity when needed. You will build repeatable program structures at scale, including tracking in Task Flow, SOPs, and swimlanes. The role calls for strong ICS technical knowledge, comfort with ambiguity, and the ability to turn technical risk into prioritized plans that protect security and uptime.

Requirements

Bachelor's degree or equivalent practical experience.
5 years of experience in program or project management.
Experience in data centers.
Experience in cybersecurity, artificial intelligence, analysis, and process engineering.

Nice To Haves

Experience with Task Flow.
Experience with Lean, Six Sigma, or similar methods to streamline workflows, reduce cycle times, and improve the scalability of vulnerability remediation programs.
Familiarity with data center critical infrastructure, including electrical, mechanical, and cooling controls, and understanding how cybersecurity risk can become operational and uptime risk.

Responsibilities

Read and interpret CVEs and ICS advisories from sources such as CISA ICS-CERT, vendor PSIRTs, and Mandiant threat intelligence, and turn technical findings into clear, actionable guidance for operational teams.
Assess real-world exploitability in an OT context by considering network exposure, required attacker access, and device mode or state.
Check advisories against the OT asset inventory to identify affected devices, models, and firmware versions so remediation targets the correct assets.
Plan, track, and report on cross-functional remediation programs in a project management tool such as Task Flow.
Keep milestones, dependencies, blockers, and SLO performance visible.
Write and maintain Standard Operating Procedures (SOPs).
Run triage decisions on critical vulnerabilities and send qualified findings to the appropriate engineering, operations, or vendor teams.
Manage vulnerability projects, including end-to-end remediation, metrics development, and exceptions reporting.
Coordinate with the OT Security Review Working Group to deliberate on severity as needed.