Security Technical Program Manager, Risk & Compliance, Level 5

Snap•Santa Monica, CA

1d•Hybrid

About The Position

Snap Inc is a technology company. We believe the camera presents the greatest opportunity to improve the way people live and communicate. Snap contributes to human progress by empowering people to express themselves, live in the moment, learn about the world, and have fun together. The Company operates Snapchat , a visual messaging app that enhances your relationships with friends, family, and the world, and Specs Inc. , a wholly-owned subsidiary dedicated to making computing more human, in addition to Bitmoji , Saturn, and other digital services. Snap Engineering teams build fun and technically sophisticated products that reach hundreds of millions of Snapchatters around the world, every day. We’re deeply committed to the well-being of everyone in our global community, which is why our values are at the root of everything we do. We move fast, with precision, and always execute with privacy at the forefront. We’re looking for a Security Technical Program Manager to lead programs that make cyber risk and compliance measurable, scalable, and embedded in how Snap builds and operates technology.

Requirements

Depth of security experience and familiarity with a broad range of information security concepts and principles.
Proven experience of running critical programs within a security field
Experience working with engineers, driving large security projects that have had a proven impact
Exceptional verbal and written communication skills, with mastery in the ability to tailor the message to the audience
Experience influencing teams and other cross-functional stakeholders to drive security programs
Bachelor's degree in computer science or a related technical field or equivalent experience
6+ years of experience in security advisory space, technical program management or security solution delivery

Nice To Haves

Experience with with NIST CSF 2.0, NIS2, or ISO 27001
Experience with CISSP, CISM, CCSP or similar certifications a plus

Responsibilities

Translate cyber risk and compliance objectives into control requirements and acceptance criteria for in-scope systems, including home-built platforms where controls need to be engineered into the product rather than forced on after the fact.
Establish control expectations early for systems that handle sensitive data, support critical business processes, or carry material operational risk.
Evaluate major infrastructure, system, and agent framework changes during design.
Build second-line monitoring and evidence readiness for a common controls framework and related cyber controls.
Lead the remediation of control deficiencies with engineering and business partners.
Evaluate risk mitigation against business priorities to rightsize mitigations against operational load.
Advise on the compliance impact of new products, entities, systems, and integrations.
Create a consistent control approach across NIS2, CCPA, ISO 27001, SOC 2, ISO 42001, and other applicable requirements.
Lead complex security programs from ambiguity to measurable outcomes.