Snap Inc is a technology company. We believe the camera presents the greatest opportunity to improve the way people live and communication. Snap contributes to human progress by empowering people to express themselves, live in the moment, learn about the world, and have fun together.
The Company operates Snapchat , a visual messaging app that enhances your relationships with friends, family, and the world, and Specs Inc. , a wholly-owned subsidiary dedicated to making computing more human, in addition to Bitmoji , Saturn, and other digital services.
Snap Engineering teams build fun and technically sophisticated products that reach hundreds of millions of Snapchatters around the world, every day. We're deeply committed to the well-being of everyone in our global community, which is why our values are at the root of everything we do. We move fast, with precision, and always execute with privacy at the forefront.
We are seeking a Security Technical Program Manager (Security TPM) to help operate and scale the programs that protect Snap's data, systems, identities, and customer experience.
This role serves as a portfolio-level program leader across Access and Privacy Engineering. You will turn ambiguous privacy and security priorities into clear operating models, roadmaps, controls, execution plans, and measurable outcomes. You will partner with Engineering, Product, Infrastructure, Legal, Compliance, Security, and business teams to make the right work visible, actionable, and sustainable.
The role supports the full lifecycle of privacy and security risk: identifying signals, establishing ownership, defining requirements, prioritizing work, driving adoption, validating outcomes, and communicating decisions and residual risk to leadership.
What you'll do
- Own the cross-functional privacy and data governance, translating strategy into priorities, roadmaps, and execution plans.
- Build operating mechanisms for intake, prioritization, decision-making, escalation, dependency management, exceptions, and closure.
- Drive privacy-by-design programs that define data use, retention, access, sharing, minimization, and control requirements early in the lifecycle.
- Coordinate material reviews and clarify technical feasibility, required approvals, controls, decision rights, and ownership.
- Lead complex, company-wide programs through rollout, adoption, measurement, and continuous improvement.
- Provide leadership visibility, resolve blockers, and automate program workflows where appropriate.
Knowledge, skills, and abilities
- Strong understanding of privacy engineering, data governance, information security, and risk management.
- Proven experience leading complex, cross-functional technical programs in privacy engineering, data governance, security, data, infrastructure, or platform environments.
- Ability to connect technical and control requirements to business outcomes, customer experience, operational risk, and regulatory obligations.
- Experience building operating models, governance mechanisms, roadmaps, metrics, decision frameworks, and leadership reporting in ambiguous domains.
- Strong technical judgment, including the ability to evaluate trade-offs, clarify approval requirements, and distinguish facts, decisions, dependencies, and residual risk.
- Track record of driving adoption of platforms, standards, controls, and processes across teams with varied incentives and maturity.
- Excellent written and verbal communication, organization, prioritization, facilitation, and follow-through across long-running programs.
- Collaborative leader who builds trust, resolves conflict, facilitates decisions, and mentors program managers.
Minimum qualifications
- Bachelor's degree in computer science, engineering, information systems, or a related technical field, or equivalent practical experience.
- 6+ years of experience in technical program management in the privacy engineering, compliance, risk management, or technical solution delivery domains
- Demonstrated experience leading privacy engineering programs across multiple engineering or business organizations.
- Demonstrated experience converting ambiguous requirements or risk signals into measurable execution plans and outcomes.
Preferred qualifications
- Experience with privacy-by-design, data lifecycle governance, data classification, data inventories, data access, retention, deletion, or third-party data risk
- Experience with GDPR, CCPA, NIST Privacy Framework, ISO 42001, NIST 2.0, ISO 27001, or comparable frameworks.
- Experience building common-control frameworks, second-line monitoring, audit evidence, risk registers, or control-health reporting.
- Experience operating in cloud-based environments such as Google Cloud or AWS.
- Experience using automation, scripting, workflow tools, or data analysis to improve program execution.
- Security, privacy, audit, risk, or cloud certifications such as CISSP, CISM, CIPM, CIPT, CIPP, or CCSP are a plus.
"Default Together" Policy at Snap: At Snap Inc. we believe th