We’re looking for a Security Technical Program Manager to lead programs that make cyber risk and compliance measurable, scalable, and embedded in how Snap builds and operates technology.

What you’ll do:

• Translate cyber risk and compliance objectives into control requirements and acceptance criteria for in-scope systems, including home-built platforms where controls need to be engineered into the product rather than forced on after the fact. 
• Establish control expectations early for systems that handle sensitive data, support critical business processes, or carry material operational risk.
• Evaluate major infrastructure, system, and agent framework changes during design.
• Build second-line monitoring and evidence readiness for a common controls framework and related cyber controls.
• Lead the remediation of control deficiencies with engineering and business partners.
• Evaluate risk mitigation against business priorities to rightsize mitigations against operational load.
• Advise on the compliance impact of new products, entities, systems, and integrations.
• Create a consistent control approach across NIS2, CCPA, ISO 27001, SOC 2, ISO 42001, and other applicable requirements.
• Lead complex security programs from ambiguity to measurable outcomes.

Knowledge, skills, & abilities:

• Depth of security experience and familiarity with a broad range of information security concepts and principles.
• Proven experience of running critical programs within a security field
• Experience working with engineers, driving large security projects that have had a proven impact
• Exceptional verbal and written communication skills, with mastery in the ability to tailor the message to the audience
• Experience influencing teams and other cross-functional stakeholders to drive security programs

Minimum qualifications:

• Bachelor's degree in computer science or a related technical field or equivalent experience
• 6+ years of experience in security advisory space, technical program management or security solution delivery

Preferred Qualifications:

• Experience with with NIST CSF 2.0, NIS2, or ISO 27001
• Experience with CISSP, CISM, CCSP or similar certifications a plus

"Default Together" Policy at Snap: At Snap Inc. we believe that being together in person helps us build our culture faster, reinforce our values, and serve our community, customers and partners better through dynamic collaboration. To reflect this, we practice a “default together” approach and expect our team members to work in an office 4+ days per week. 

: Snap Inc. is its own community, so we’ve got your back! We do our best to make sure you and your loved ones have everything you need to be happy and healthy, on your own terms. Our benefits are built around your needs and include paid parental leave, comprehensive medical coverage, emotional and mental health support programs, and compensation packages that let you share in Snap’s long-term success!

Compensation

In the United States, work locations are assigned a pay zone which determines the salary range for the position. The successful candidate’s starting pay will be determined based on job-related skills, experience, qualifications, work location, and market conditions. The starting pay may be negotiable within the salary range for the position.These pay zones may be modified in the future.

:

Zone B:

Zone C:

If you believe this job description is missing required pay transparency information, please submit a report through this form: Job Description Pay Range Disclosure.