Security TPM: Risk & Compliance Program Leader

SNAP, Inc.; Los Angeles (CA); On-site; USD 190,000 - 284,000; Full time

Job summary

Snap Inc. is seeking a Security Technical Program Manager to lead programs that make cyber risk and compliance measurable, scalable, and embedded in how Snap builds and operates technology.

The role focuses on translating risk into control requirements, establishing early control expectations, and guiding remediation with engineering teams to support a resilient, privacy‑first product ecosystem.

Qualifications

• Bachelor's degree in computer science or a related technical field or equivalent experience.
• 6+ years of experience in security advisory space, technical program management, or security solution delivery.
• Experience leading security programs with engineers and cross-functional teams.

Responsibilities

• Translate cyber risk and compliance objectives into control requirements and acceptance criteria for in-scope systems.
• Establish control expectations early for systems handling sensitive data or carrying material risk.
• Evaluate infrastructure, system, and agent framework changes during design.
• Build monitoring and evidence readiness for a common controls framework.
• Lead remediation of control deficiencies with engineering and business partners.
• Evaluate risk mitigation against business priorities to rightsize mitigations.
• Advise on the compliance impact of new products, entities, systems, and integrations.
• Create a consistent control approach across NIS2, NIST CSF, ISO 27001, SOC 2, and related standards.
• Lead complex security programs from ambiguity to measurable outcomes.

Skills

Security leadership

cross-functional collaboration

stakeholder influence

communication skills

Education

Bachelor's degree in computer science or related field

Job description

Snap Inc. is seeking a Security Technical Program Manager to lead programs that make cyber risk and compliance measurable, scalable, and embedded in how Snap builds and operates technology.

The role focuses on translating risk into control requirements, establishing early control expectations, and guiding remediation with engineering teams to support a resilient, privacy‑first product ecosystem.