Security TPM: Risk & Compliance, Scalable Controls

SNAP, Inc.; Bellevue (WA); On-site; USD 162,000 - 284,000; Full time

Benefits offered by this job

Paid parental leave

Comprehensive medical coverage

Emotional and mental health support

Job summary

Snap Inc. is seeking a Security Technical Program Manager to lead programs that make cyber risk and compliance measurable, scalable, and embedded in how Snap builds and operates technology.

You will translate risk objectives into control requirements and establish early expectations for systems handling sensitive data, supporting critical processes and operations. You will drive second-line monitoring, guide remediation of deficiencies with engineering and business partners, and align controls

Qualifications

• Bachelor's degree in computer science or a related technical field or equivalent experience.
• 6+ years of experience in security advisory space, technical program management or security solution delivery.
• Experience with NIST CSF 2.0, NIS2, or ISO 27001 (preferred).
• Certifications such as CISSP, CISM, CCSP or similar are a plus.

Responsibilities

• Translate cyber risk and compliance objectives into control requirements and acceptance criteria for in-scope systems.
• Establish control expectations early for systems handling sensitive data or carrying operational risk.
• Evaluate infrastructure, system, and agent framework changes during design.
• Build second-line monitoring and evidence readiness for a common controls framework.
• Lead remediation of control deficiencies with engineering and business partners.
• Evaluate risk mitigation against business priorities to rightsize mitigations.
• Advise on compliance impact of new products, entities, systems, and integrations.
• Create a consistent control approach across NIS2, CCPA, ISO 27001, SOC 2, and related standards.
• Lead complex security programs from ambiguity to measurable outcomes.

Skills

Security experience

Security program management

Cross-functional collaboration

Verbal and written communication

Stakeholder influence

Education

Bachelor's degree in CS or related field

Job description

Snap Inc. is seeking a Security Technical Program Manager to lead programs that make cyber risk and compliance measurable, scalable, and embedded in how Snap builds and operates technology.

You will translate risk objectives into control requirements and establish early expectations for systems handling sensitive data, supporting critical processes and operations. You will drive second-line monitoring, guide remediation of deficiencies with engineering and business partners, and align controls