Security Technical Program Manager, Risk & Compliance, Level 5

Snap Inc is a technology company. We believe the camera presents the greatest opportunity to improve the way people live and communicate. Snap contributes to human progress by empowering people to express themselves, live in the moment, learn about the world, and have fun together.

The Company operates Snapchat, a visual messaging app that enhances your relationships with friends, family, and the world, and Specs Inc., a wholly-owned subsidiary dedicated to making computing more human, in addition to Bitmoji, Saturn, and other digital services.

Snap Engineering teams build fun and technically sophisticated products that reach hundreds of millions of Snapchatters around the world, every day. We’re deeply committed to the well-being of everyone in our global community, which is why our values are at the root of everything we do. We move fast, with precision, and always execute with privacy at the forefront.

We’re looking for a Security Technical Program Manager to lead programs that make cyber risk and compliance measurable, scalable, and embedded in how Snap builds and operates technology.

What you’ll do:

• Translate cyber risk and compliance objectives into control requirements and acceptance criteria for in-scope systems, including home-built platforms where controls need to be engineered into the product rather than forced on after the fact. 
• Establish control expectations early for systems that handle sensitive data, support critical business processes, or carry material operational risk.
• Evaluate major infrastructure, system, and agent framework changes during design.
• Build second-line monitoring and evidence readiness for a common controls framework and related cyber controls.
• Lead the remediation of control deficiencies with engineering and business partners.
• Evaluate risk mitigation against business priorities to rightsize mitigations against operational load.
• Advise on the compliance impact of new products, entities, systems, and integrations.
• Create a consistent control approach across NIS2, CCPA, ISO 27001, SOC 2, ISO 42001, and other applicable requirements.
• Lead complex security programs from ambiguity to measurable outcomes.

Knowledge, skills, & abilities:

• Depth of security experience and familiarity with a broad range of information security concepts and principles.
• Proven experience of running critical programs within a security field
• Experience working with engineers, driving large security projects that have had a proven impact
• Exceptional verbal and written communication skills, with mastery in the ability to tailor the message to the audience
• Experience influencing teams and other cross-functional stakeholders to drive security programs

Minimum qualifications:

• Bachelor's degree in computer science or a related technical field or equivalent experience
• 6+ years of experience in security advisory space, technical program management or security solution delivery

Preferred Qualifications:

• Experience with with NIST CSF 2.0, NIS2, or ISO 27001
• Experience with CISSP, CISM, CCSP or similar certifications a plus

"Default Together" Policy at Snap: At Snap Inc. we believe that being together in person helps us build our culture faster, reinforce our values, and serve our community, customers and partners better through dynamic collaboration. To reflect this, we practice a “default together” approach and expect our team members to work in an office 4+ days per week. 

At Snap, we believe that having a team of diverse backgrounds and voices working together will enable us to create innovative products that improve the way people live and communicate. Snap is proud to be an equal opportunity employer, and committed to providing employment opportunities regardless of race, religious creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex, gender, gender identity, gender expression, pregnancy, childbirth and breastfeeding, age, sexual orientation, military or veteran status, or any other protected classification, in accordance with applicable federal, state, and local laws. EOE, including disability/vets.

We are an Equal Opportunity Employer and will consider qualified applicants with criminal histories in a manner consistent with applicable law (by example, the requirements of the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, where applicable).

Our Benefits: Snap Inc. is its own community, so we’ve got your back! We do our best to make sure you and your loved ones have everything you need to be happy and healthy, on your own terms. Our benefits are built around your needs and include paid parental leave, comprehensive medical coverage, emotional and mental health support programs, and compensation packages that let you share in Snap’s long-term success!

Compensation

In the United States, work locations are assigned a pay zone which determines the salary range for the position. The successful candidate’s starting pay will be determined based on job-related skills, experience, qualifications, work location, and market conditions. The starting pay may be negotiable within the salary range for the position. These pay zones may be modified in the future.

Zone A (CA, WA, NYC):

Zone B:

Zone C:

If you believe this job description is missing required pay transparency information, please submit a report through this form: Job Description Pay Range Disclosure.