Security Technical Program Manager, Risk & Compliance, Level 5

Snap Inc. • Los Angeles, CA

4d • $162,000 - $284,000 • Hybrid

About The Position

Snap Inc. is a technology company focused on improving how people live and communicate through its camera-centric products. The company operates Snapchat, Bitmoji, and other digital services. Snap Engineering teams build technically sophisticated products for a global audience, emphasizing speed, precision, and privacy. This role is for a Security Technical Program Manager who will lead programs to make cyber risk and compliance measurable, scalable, and integrated into Snap's technology development and operations.

Requirements

• Depth of security experience and familiarity with a broad range of information security concepts and principles.
• Proven experience of running critical programs within a security field.
• Experience working with engineers, driving large security projects that have had a proven impact.
• Exceptional verbal and written communication skills, with mastery in the ability to tailor the message to the audience.
• Experience influencing teams and other cross-functional stakeholders to drive security programs.
• Bachelor's degree in computer science or a related technical field or equivalent experience.
• 6+ years of experience in security advisory space, technical program management or security solution delivery.

Nice To Haves

• Experience with NIST CSF 2.0, NIS2, or ISO 27001.
• Experience with CISSP, CISM, CCSP or similar certifications a plus.

Responsibilities

• Translate cyber risk and compliance objectives into control requirements and acceptance criteria for in-scope systems, including home-built platforms where controls need to be engineered into the product.
• Establish control expectations early for systems that handle sensitive data, support critical business processes, or carry material operational risk.
• Evaluate major infrastructure, system, and agent framework changes during design.
• Build second-line monitoring and evidence readiness for a common controls framework and related cyber controls.
• Lead the remediation of control deficiencies with engineering and business partners.
• Evaluate risk mitigation against business priorities to rightsize mitigations against operational load.
• Advise on the compliance impact of new products, entities, systems, and integrations.
• Create a consistent control approach across NIS2, CCPA, ISO 27001, SOC 2, ISO 42001, and other applicable requirements.
• Lead complex security programs from ambiguity to measurable outcomes.

Benefits

• Paid parental leave
• Comprehensive medical coverage
• Emotional and mental health support programs
• Compensation packages that let you share in Snap’s long-term success (equity in the form of RSUs)

What This Job Offers

• Job Type: Full-time
• Career Level: Senior