Security Technical Program Manager, Risk & Compliance, Level 5

Snap Inc is a technology company. We believe the camera presents the greatest opportunity to improve the way people live and communicate. Snap contributes to human progress by empowering people to express themselves, live in the moment, learn about the world, and have fun together.

The Company operates Snapchat, a visual messaging app that enhances your relationships with friends, family, and the world, and Specs Inc., a wholly-owned subsidiary dedicated to making computing more human, in addition to Bitmoji, Saturn, and other digital services.

Snap Engineering teams build fun and technically sophisticated products that reach hundreds of millions of Snap chatters around the world, every day. We’re deeply committed to the well-being of everyone in our global community, which is why our values are at the root of everything we do. We move fast, with precision, and always execute with privacy at the forefront.

We’re looking for a Security Technical Program Manager to lead programs that make cyber risk and compliance measurable, scalable, and embedded in how Snap builds and operates technology.

What you’ll do:

Translate cyber risk and compliance objectives into control requirements and acceptance criteria for in-scope systems, including home-built platforms where controls need to be engineered into the product rather than forced on after the fact. Establish control expectations early for systems that handle sensitive data, support critical business processes, or carry material operational risk.

Evaluate major infrastructure, system, and agent framework changes during design.

Build second-line monitoring and evidence readiness for a common controls framework and related cyber controls.

Lead the remediation of control deficiencies with engineering and business partners.

Evaluate risk mitigation against business priorities to rightsize mitigations against operational load.

Advise on the compliance impact of new products, entities, systems, and integrations.

Create a consistent control approach across NIS2, CCPA, ISO 27001, SOC 2, ISO 42001, and other applicable requirements.

Lead complex security programs from ambiguity to measurable outcomes.

Knowledge, skills, & abilities:

Depth of security experience and familiarity with a broad range of information security concepts and principles.

Proven experience of running critical programs within a security field

Experience working with engineers, driving large security projects that have had a proven impact

Exceptional verbal and written communication skills, with mastery in the ability to tailor the message to the audience

Experience influencing teams and other cross-functional stakeholders to drive security programs

Minimum qualifications:

Bachelor's degree in computer science or a related technical field or equivalent experience6+ years of experience in security advisory space, technical program management or security solution delivery

Preferred Qualifications:

Experience with with NIST CSF 2.0, NIS2, or ISO 27001

Experience with CISSP, CISM, CCSP or similar certifications a plus"Default Together" Policy at Snap:
At Snap Inc. we believe that being together in person helps us build our culture faster, reinforce our values, and serve our community, customers and partners better through dynamic collaboration. To reflect this, we practice a “default together” approach and expect our team members to work in an office 4+ days per week. At Snap, we believe that having a team of diverse backgrounds and voices working together will enable us to create innovative products that improve the way people live and communicate.

Snap is proud to be an equal opportunity employer, and committed to providing employment opportunities regardless of race, religious creed, color, national…