Strategic Third-Party Risk & Governance Program Manager

Google; United States; On-site; USD 164,000 - 239,000; Full time

Benefits offered by this job

Health, dental, vision, life, and long

Disability insurance

401(k) retirement with match

Paid time off — 20 days

Sick time — 40 hours/year

Maternity leave 28–30 weeks

Baby bonding leave 18 weeks

Holidays 13 days/year

Job summary

Google is seeking a Program Manager for Third-Party Governance and Oversight (3PGO) to shape the strategic roadmap for third-party risk management. You will coordinate across Engineering, Legal, Security, Procurement, and PA Compliance to align teams behind a unified risk ecosystem and drive governance initiatives from strategy to execution.

You will influence stakeholders without direct authority and build consensus on risk mitigation goals, contributing to a robust, enterprise-wide governance

Qualifications

• Minimum 10 years of experience in compliance, risk management, investigation, auditing, legal, or consulting.
• Experience in program management.
• Experience with third-party risk management.

Responsibilities

• Develop overall 3PGO strategy and engagement to land a unified third-party risk management framework across Google.
• Lead cross-functional working groups with engineering, legal, compliance, and procurement.
• Research, propose, and implement industry-leading third-party risk standards and governance practices.
• Author strategic dashboards, risk metrics, and briefing materials for executive reviews.
• Manage day-to-day program oversight and remediation plans for high-priority risks.

Skills

10 years compliance/risk management

Program management

Third-party risk management

Education

Bachelor's degree or equivalent practical experience

Job description

Google is seeking a Program Manager for Third-Party Governance and Oversight (3PGO) to shape the strategic roadmap for third-party risk management. You will coordinate across Engineering, Legal, Security, Procurement, and PA Compliance to align teams behind a unified risk ecosystem and drive governance initiatives from strategy to execution.

You will influence stakeholders without direct authority and build consensus on risk mitigation goals, contributing to a robust, enterprise-wide governance