Security Technical Program Manager (Risk & Compliance)

• We’re looking for a Security Technical Program Manager to lead programs that make cyber risk and compliance measurable, scalable, and embedded in how Snap builds and operates technology
• Translate cyber risk and compliance objectives into control requirements and acceptance criteria for in-scope systems, including home-built platforms where controls need to be engineered into the product rather than forced on after the fact
• Establish control expectations early for systems that handle sensitive data, support critical business processes, or carry material operational risk
• Evaluate major infrastructure, system, and agent framework changes during design
• Build second-line monitoring and evidence readiness for a common controls framework and related cyber controls
• Lead the remediation of control deficiencies with engineering and business partners
• Evaluate risk mitigation against business priorities to rightsize mitigations against operational load
• Advise on the compliance impact of new products, entities, systems, and integrations
• Create a consistent control approach across NIS2, CCPA, ISO 27001, SOC 2, ISO 42001, and other applicable requirements
• Lead complex security programs from ambiguity to measurable outcomes

Benefits

• Up to 28 weeks of parental leave and return-to-work program
• Adoption, surrogacy, infertility, and fertility preservation benefits
• Backup child care coverage, center-based care support, & caregiver assistance
• Dependent Daycare Flexible Spending Account
• Services to support your path to parenthood & beyond - fertility support & family planning via Carrot, SNOO, Hinge Health
• Short-term disability, long-term disability, basic life insurance, and AD&D insurance
• For Snap, employees taking care of loved ones with complex, chronic, or ongoing care needs (i.e. parent with Dementia, spouse with Cancer, child with Autism), your family can save time, money, & stress with Wellthy
• Lactation rooms (based on office location) and breastmilk shipping coverage
• Comprehensive medical coverage, including PPO, HDHP with HSA, and HMO options
• Dental coverage, including orthodontia benefits
• Vision coverage, including frame and contact allowance and LASIK benefits
• Free membership to One Medical for primary and urgent healthcare services
• Business Travel Insurance
• Gym perks and discounts
• Team fitness classes and races
• Sports leagues
• Cooking and nutritional workshops
• Well-being reimbursement
• Unlimited access to virtual physical therapy with Anthem
• 15 sessions per year of mental health for you + dependents through Lyra
• Generous time off and leave programs. In the US, this includes the following:
• Up to 3 weeks (120 hours) of vacation time and 1 floating holiday for non-exempt team members
• 12 paid holidays per year
• 15 sick and safe days per year
• Social gatherings, team outings, and volunteering programs
• Meditation and yoga classes
• Speaker series, classes, and subscriptions to educational programs
• Snap Inc. provides a 401(k) plan that allows you to save on a pre-tax, Roth, and after-tax basis for your retirement (yes, we even have the Mega backdoor option!) Snap will also match 100% up to 3% of your contribution and then 50% on your 4th and 5th%
• Flexible Spending Accounts for healthcare, daycare and commuter
• Health Savings Account with employer contributions
• Rocket Lawyer memberships
• Financial education programs
• Snap exclusive discounts and perks
• Compensation packages that let you share in Snap’s long-term success!- Experience working with engineers, driving large security projects that have had a proven impact
• Depth of security experience and familiarity with a broad range of information security concepts and principles
• Proven experience of running critical programs within a security field
• Exceptional verbal and written communication skills, with mastery in the ability to tailor the message to the audience
• Experience influencing teams and other cross-functional stakeholders to drive security programs
• Bachelor’s degree in computer science or a related technical field or equivalent experience
• 6+ years of experience in security advisory space, technical program management or security solution delivery
• Experience with with NIST CSF 2.0, NIS2, or ISO 27001
• Experience with CISSP, CISM, CCSP or similar certifications a plus