Program Manager III, Operational Technology Security, Data Centers

Google LLC; Sunnyvale (CA); On-site; USD 159,000 - 230,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401(k) with company match

Paid time off

Sick time

Maternity leave

Baby bonding leave

13 paid holidays

Job summary

Google LLC is seeking a Program Manager for Operational Technology (OT) Cybersecurity to lead end-to-end vulnerability management across critical infrastructure. You will coordinate with engineering, operations, and vendor teams to triage CVEs in an OT context and drive scalable workflows using Task Flow and SOPs.

This role requires strong ICS technical knowledge, comfort with ambiguity, and the ability to translate technical risk into prioritized plans that protect security and uptime.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 5 years of experience in program or project management.
• Experience in data centers.
• Experience in cyber security, artificial intelligence, analysis, and process engineering.

Responsibilities

• Read and interpret CVEs and ICs advisories; translate findings into actionable guidance for operational teams.
• Assess real-world exploitability in an OT context and map to asset inventory; identify affected devices, models and firmware versions.
• Plan, track and report on cross-functional remediation programs using a PM tool like Task Flow.
• Develop and maintain SOPs; keep milestones, dependencies, blockers and SLOs visible.
• Triage critical vulnerabilities and coordinate with engineering, operations or vendors.

Skills

Program management

Data centers

Cybersecurity

AI/Analytics

Process engineering

Education

Bachelor's degree or equivalent

Tools

Task Flow

Job description

In accordance with Washington state law, we are highlighting our comprehensive benefits package, which is available to all eligible US based employees. Benefits for this role include:

• Health, dental, vision, life, disability insurance
• Retirement Benefits: 401(k) with company match
• Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment
• Sick Time: 40 hours/year (increased to 69 hours/year for Seattle) including 5 discretionary sick days per instance
• Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks
• Baby Bonding Leave: 18 weeks
• Holidays: 13 paid days per year

Note: By applying to this position you will have an opportunity to share your preferred working location from the following: Atlanta, GA, USA; Reston, VA, USA; Seattle, WA, USA; Sunnyvale, CA, USA

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 5 years of experience in program or project management.
• Experience in data centers.
• Experience in cyber security, artificial intelligence, analysis, and process engineering.

Preferred qualifications

• Experience in Task Flow.
• Experience with Lean, Six Sigma or similar methods to streamline workflows, cut cycle times and improve how well vulnerability remediation programs scale.
• Familiarity with data center critical infrastructure, including electrical, mechanical and cooling controls, and how cybersecurity risk turns into operational and uptime risk.

About The Job

A problem isn’t truly solved until it’s solved for all. That’s why Googlers build products that help create opportunities for everyone, whether down the street or across the globe. As a Program Manager at Google, you’ll lead complex, multi-disciplinary projects from start to finish — working with stakeholders to plan requirements, manage project schedules, identify risks, and communicate clearly with cross-functional partners across the company. Your projects will often span offices, time zones, and hemispheres. It's your job to coordinate the players and keep them up to date on progress and deadlines. As a Program Manager for Operational Technology (OT) Cybersecurity, you will support vulnerability management programs across the operational technology that supports critical infrastructure. These environments have tight downtime limits, safety concerns and complex vendor dependencies, so standard IT remediation practices often don't apply. You will manage vulnerability projects including end-to-end remediation, metrics development, and exceptions reporting. You will also drive the initial triage of Common Vulnerabilities and Exposures (CVEs), judging exploitability in an OT context, checking applicability against the asset inventory, and coordinate with the OT Security Review Working Group to deliberate on a severity as needed. You will also build the program structure that makes this repeatable at scale, including tracking in Task Flow, SOPs and swimlanes. The role calls for strong ICS technical knowledge, comfort with ambiguity, and the ability to turn technical risk into prioritized plans that protect both security and uptime.

Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $159000 - $230000 (USD) + 15% bonus target + equity + benefits

Responsibilities

Learn more about benefits at Google.

• Read and interpret CVEs and ICs advisories from sources such as CISA ICs-CERT, vendor PSIRTs and Mandiant threat intelligence. Turn the technical findings into clear, actionable guidance for operational teams.
• Judge real-world exploitability in an OT context by looking at network exposure, the access an attacker would need, and device mode or state. Check advisories against the OT asset inventory to find affected devices, models and firmware versions, so remediation targets the right assets.
• Plan, track and report on cross-functional remediation programs in a project management tool such as Task Flow.
• Keep milestones, dependencies, blockers and SLO performance visible. Write and maintain Standard Operating Procedures (SOPs).
• Run triage decisions on critical vulnerabilities and send qualified findings to the right engineering, operations or vendor teams.

Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.