Program Manager III, Operational Technology Security, Data Centers

Google LLC; Atlanta (GA); On-site; USD 159,000 - 230,000; Full time

Benefits offered by this job

Equity

Bonus target

Benefits

Job summary

Google LLC is seeking a Program Manager for Operational Technology (OT) Cybersecurity. You will lead cross-functional, multi-disciplinary projects spanning multiple offices and time zones, coordinating requirements, schedules, risks, and progress with stakeholders across Google.

The role focuses on vulnerability management programs in OT environments, triage of CVEs, and building scalable processes, SOPs, and governance to protect uptime and security across critical infrastructure.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 5 years of experience in program or project management.
• Experience in data centers.
• Experience in cyber security, artificial intelligence, analysis, and process engineering.

Responsibilities

• Lead complex, multi-disciplinary projects from start to finish, coordinating with stakeholders to plan requirements and manage schedules.
• Identify risks, manage timelines, and communicate progress to cross-functional partners across the company.
• Manage vulnerability projects end-to-end including remediation, metrics, and reporting.
• Drive initial triage of CVEs in an OT context and assess exploitability against asset inventories.
• Build scalable program structure with SOPs, swimlanes and tracking in Task Flow.

Skills

Program management

Cross-functional coordination

Data center experience

Cyber security

AI awareness

Process engineering

Data analysis

Education

Bachelor's degree or equivalent practical experience

Tools

Task Flow

Job description

A problem isn’t truly solved until it’s solved for all. That’s why Googlers build products that help create opportunities for everyone, whether down the street or across the globe. As a Program Manager at Google, you’ll lead complex, multi-disciplinary projects from start to finish — working with stakeholders to plan requirements, manage project schedules, identify risks, and communicate clearly with cross-functional partners across the company. Your projects will often span offices, time zones, and hemispheres. It's your job to coordinate the players and keep them up to date on progress and deadlines.

As a Program Manager for Operational Technology (OT) Cybersecurity, you will support vulnerability management programs across the operational technology that supports critical infrastructure. These environments have tight downtime limits, safety concerns and complex vendor dependencies, so standard IT remediation practices often don't apply. You will manage vulnerability projects including end-to-end remediation, metrics development, and exceptions reporting. You will also drive the initial triage of Common Vulnerabilities and Exposures (CVEs), judging exploitability in an OT context, checking applicability against the asset inventory, and coordinate with the OT Security Review Working Group to deliberate on a severity as needed. You will also build the program structure that makes this repeatable at scale, including tracking in Task Flow, SOPs and swimlanes. The role calls for strong IC technical knowledge, comfort with ambiguity, and the ability to turn technical risk into prioritized plans that protect both security and uptime.

Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $159000 - $230000 (USD) + 15% bonus target + equity + benefits

Learn more about benefits at Google (https://www.google.com/about/careers/applications/benefits/).

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
• 5 years of experience in program or project management.
• Experience in data centers.
• Experience in cyber security, artificial intelligence, analysis, and process engineering.

Preferred qualifications:

• Experience in Task Flow.
• Experience with Lean, Six Sigma or similar methods to streamline workflows, cut cycle times and improve how well vulnerability remediation programs scale.
• Familiarity with data center critical infrastructure, including electrical, mechanical and cooling controls, and how cybersecurity risk turns into operational and uptime risk.
• Read and interpret CVEs and IC…mentors from sources such as CISA ICS‑CERT, vendor PSIRTs and Mandiant threat intelligence. Turn the technical findings into clear, actionable guidance for operational teams.
• Judge real‑world exploitability in an OT context by looking at network exposure, the access an attacker would need, and device mode or state. Check advisories against the OT asset inventory to find affected devices, models and firmware versions, so remediation targets the right assets.
• Plan, track and report on cross‑functional remediation programs in a project management tool such as Task Flow.
• Keep milestones, dependencies, blockers and SLO performance visible. Write and maintain Standard Operating Procedures (SOPs).
• Run triage decisions on critical vulnerabilities and send qualified findings to the right engineering, operations or vendor teams.