Technical Program Manager - Regulatory and Cybersecurity Audits

Technical Program Manager, Regulatory and Cybersecurity Audits

Minimum qualifications:

• Bachelor's degree in a technical field, or equivalent practical experience.
  
• 2 years of experience in program management.
  
• Experience in cyber security or auditing.

Preferred qualifications:

• 2 years of experience managing cross-functional or cross-team projects.
• Experience in Cybersecurity (e.g., detection, incident response, or infrastructure protection) or with industry-standard frameworks for incident response.
• Experience navigating audits in regulated markets and building dashboards or reporting frameworks that show operational health (e.g., mean time to detect/respond) for an external audience.
• Familiarity with the payment aggregator business model, or technical concepts like data localization and transaction monitoring.
• Familiarity with drafting technical white papers, compliance narratives, or Standard Operating Procedures (SOPs).

Familiarity with the payment aggregator business model, or technical concepts like data localization and transaction monitoring.Familiarity with the payment aggregator business model, or technical concepts like data localization and transaction monitoring.

About the job

A problem isn’t truly solved until it’s solved for all. That’s why Googlers build products that help create opportunities for everyone, whether down the street or across the globe. As a Technical Program Manager at Google, you’ll use your technical expertise to lead complex, multi-disciplinary projects from start to finish. You’ll work with stakeholders to plan requirements, identify risks, manage project schedules, and communicate clearly with cross-functional partners across the company. You're equally comfortable explaining your team's analyses and recommendations to executives as you are discussing the technical tradeoffs in product development with engineers.

As a Technical Program Manager, You will lead the technical readiness and execution for high-stakes regulatory audits, with a primary focus on our payment aggregator business in India. You will act as the bridge between technical Subject Matter Experts (SMEs) (e.g., security engineers, detection specialists, and privacy leads) and regulators. Your goal is to translate complex cybersecurity operations such as threat hunting, malware analysis, and network hardening, into clear, compliant narratives and evidence. This role is pivotal in safeguarding Google’s ability to operate and scale its payments infrastructure.

Google is an engineering company at heart. We hire people with a broad set of technical skills who are ready to take on some of technology's greatest challenges and make an impact on users around the world. At Google, engineers not only revolutionize search, they routinely work on scalability and storage solutions, large-scale applications and entirely new platforms for developers around the world. From Google Ads to Chrome, Android to YouTube, social to local, Google engineers are changing the world one technological achievement after another.

Responsibilities

• Act as the primary point of contact between Detection and Response teams (D&R) SMEs and the teams managing onsite regulator inspections.
• Partner with technical teams to build out the technical narratives and measurement frameworks that show our security posture to auditors.
• Interpret complex regulatory mandates and translate them into the context of Google’s specific systems and operations.
• Facilitate the high-stakes review process for sharing sensitive technical evidence, ensuring regulators get what they need without compromising security.
• Participate in sessions, alongside technical SMEs, to explain Google's security operations (e.g., how we detect threats or harden network boundaries) in a way that aligns with regulatory language.

Experience Level

Mid Level