Security Technical Program Manager, Engineering Privacy & Access

Snap Inc.•Los Angeles, CA

2d•$162,000 - $284,000•Onsite

About The Position

Snap Inc. is seeking a Security Technical Program Manager to operate and scale programs that protect its data, systems, identities, and customer experience. This portfolio-level program leader will support Access and Privacy Engineering, turning ambiguous privacy and security priorities into operating models, roadmaps, controls, execution plans, and measurable outcomes. The role partners with Engineering, Product, Infrastructure, Legal, Compliance, Security, and business teams to make work visible, actionable, and sustainable. The position supports the full lifecycle of privacy and security risk, including identifying signals, establishing ownership, defining requirements, prioritizing work, driving adoption, validating outcomes, and communicating decisions and residual risk to leadership. Snap follows a “default together” approach, expecting team members to work in an office four or more days per week.

Requirements

Bachelor’s degree in computer science, engineering, information systems, or a related technical field, or equivalent practical experience.
At least 6 years of experience in technical program management in privacy engineering, compliance, risk management, or technical solution delivery domains.
Demonstrated experience leading privacy engineering programs across multiple engineering or business organizations.
Demonstrated experience converting ambiguous requirements or risk signals into measurable execution plans and outcomes.
Strong understanding of privacy engineering, data governance, information security, and risk management.
Proven experience leading complex, cross-functional technical programs in privacy engineering, data governance, security, data, infrastructure, or platform environments.
Ability to connect technical and control requirements to business outcomes, customer experience, operational risk, and regulatory obligations.
Experience building operating models, governance mechanisms, roadmaps, metrics, decision frameworks, and leadership reporting in ambiguous domains.
Strong technical judgment, including the ability to evaluate trade-offs, clarify approval requirements, and distinguish facts, decisions, dependencies, and residual risk.
Track record of driving adoption of platforms, standards, controls, and processes across teams with varied incentives and maturity.
Excellent written and verbal communication, organization, prioritization, facilitation, and follow-through across long-running programs.
Collaborative leadership skills, including building trust, resolving conflict, facilitating decisions, and mentoring program managers.

Nice To Haves

Experience with privacy-by-design, data lifecycle governance, data classification, data inventories, data access, retention, deletion, or third-party data risk.
Experience with GDPR, CCPA, NIST Privacy Framework, ISO 42001, NIST 2.0, ISO 27001, or comparable frameworks.
Experience building common-control frameworks, second-line monitoring, audit evidence, risk registers, or control-health reporting.
Experience operating in cloud-based environments such as Google Cloud or AWS.
Experience using automation, scripting, workflow tools, or data analysis to improve program execution.
Security, privacy, audit, risk, or cloud certifications such as CISSP, CISM, CIPM, CIPT, CIPP, or CCSP.

Responsibilities

Own cross-functional privacy and data governance, translating strategy into priorities, roadmaps, and execution plans.
Build operating mechanisms for intake, prioritization, decision-making, escalation, dependency management, exceptions, and closure.
Drive privacy-by-design programs that define data use, retention, access, sharing, minimization, and control requirements early in the lifecycle.
Coordinate material reviews and clarify technical feasibility, required approvals, controls, decision rights, and ownership.
Lead complex, company-wide programs through rollout, adoption, measurement, and continuous improvement.
Provide leadership visibility, resolve blockers, and automate program workflows where appropriate.
Identify privacy and security risk signals, establish ownership, define requirements, prioritize work, drive adoption, validate outcomes, and communicate decisions and residual risk to leadership.