Technical Program Manager, Data Center, Risk and Compliance, CSRM, SPARC

Minimum qualifications:

• Bachelor's degree in a technical field, or equivalent practical experience.
• 1 year of experience in program management.
• 1 year of experience in compliance.
• Experience managing multiple projects and workstreams in an environment, including interpreting and adapting global policies to meet US/Canada regulatory requirements (e.g., FBA, FedRAMP, PSPC).

Preferred qualifications:

• Professional certification related to audit, risk, or compliance (e.g., CISA, CISM, CRISC, CIA, PMP).
• Experience in areas like large-scale program management, compliance, assurance, risk management, and audit work.
• Experience and confidence interacting with various government and regulatory bodies.
• Attention to detail, time management, and ability to thrive in an ambiguous environment.
• Strong skills, open to feedback and able to flex. Strong mindset for innovation, continuous improvement, and exceeding business expectations.
• Excellent communication skills, with the ability to construct and defend impactful insights from complex analysis, and availability for up to 25% travel.

About the job

A problem isn’t truly solved until it’s solved for all. That’s why Googlers build products that help create opportunities for everyone, whether down the street or across the globe. As a Technical Program Manager at Google, you’ll use your technical expertise to lead complex, multi-disciplinary projects from start to finish. You’ll work with stakeholders to plan requirements, identify risks, manage project schedules, and communicate clearly with cross-functional partners across the company. You're equally comfortable explaining your team's analyses and recommendations to executives as you are discussing the technical tradeoffs in product development with engineers.

As a Technical Program Manager for Strategic Policy, Assurance, Risk, and Compliance (SPARC), you will be responsible for driving assurance programs and managing audits across regions or multi-site domains. These environments often feature evolving regulatory landscapes and unique local requirements. You will play a key role in coordinating proactive assurance activities, managing localized external audits from end-to-end, and translating global risk and compliance frameworks into actionable, localized execution plans for operational teams (the first line of defense). This includes facilitating control testing, managing country-specific compliance programs, and partnering with site leads to address identified control gaps or risks. You will also be responsible for synthesizing control evidence and preparing teams for external audit interviews. This role requires navigating ambiguity and ensuring global policies are effectively implemented in a way that meets specific local needs.

Behind everything our users see online is the architecture built by the Technical Infrastructure team to keep it running. From developing and maintaining our data centers to building the next generation of Google platforms, we make Google's product portfolio possible. We're proud to be our engineers' engineers and love voiding warranties by taking things apart so we can rebuild them. We keep our networks up and running, ensuring our users have the best and fastest experience possible.

Responsibilities

• Coordinate internal and external audits, manage evidence collection, and partner with data center teams to ensure audit readiness and alignment.
• Monitor regional dashboards and local risk registers to validate continuous control execution and ensure risk remediation stays on schedule.
• Improve and streamline organizational processes while serving as the primary contact for centralized eGRC tooling and standard risk reporting.
• Drive the day-to-day execution of bespoke, region-specific compliance and risk programs tailored to your designated portfolio.
• Create, update, and maintain vital program documentation and training materials for cross-functional stakeholders.