Security Technical Program Manager, Engineering Privacy & Access

Description

The company makes a visual messaging app, runs a wholly-owned subsidiary focused on more human computing, and operates other digital services.

The engineering group builds products used by hundreds of millions of people every day.

This Security TPM role leads programs across Access and Privacy Engineering at the portfolio level.

You will take vague privacy and security priorities and shape them into operating models, roadmaps, controls, execution plans, and outcomes you can measure.

You will work with Engineering, Product, Infrastructure, Legal, Compliance, Security, and business teams to keep the work visible and manageable over time.

The role covers the full privacy and security risk cycle: spotting signals, assigning ownership, setting requirements, ranking work, driving adoption, checking results, and reporting decisions and leftover risk to leadership.

The programs you run protect company data, systems, identities, and the customer experience.

Responsibilities

• Lead cross-functional privacy and data governance, turning strategy into priorities, roadmaps, and execution plans.
• Set up mechanisms for intake, ranking, decisions, escalation, dependencies, exceptions, and closing work out.
• Run privacy-by-design programs that set requirements for data use, retention, access, sharing, minimization, and controls early in the lifecycle.
• Run material reviews, assess technical feasibility, and pin down approvals, controls, decision rights, and ownership.
• Take complex company-wide programs through rollout, adoption, measurement, and ongoing improvement.
• Give leaders clear visibility, clear blockers, and automate program workflows where it makes sense.

Requirements

• Solid grasp of privacy engineering, data governance, information security, and risk management.
• Proven record leading complex cross-functional technical programs in privacy engineering, data governance, security, data, infrastructure, or platform work.
• Able to link technical and control requirements to business outcomes, customer experience, operational risk, and regulatory duties.
• Experience designing operating models, governance, roadmaps, metrics, decision frameworks, and leadership reporting in unclear domains.
• Sound technical judgment: weigh trade-offs, pin down approval needs, and separate facts, decisions, dependencies, and residual risk.
• Track record of getting teams with different incentives and maturity levels to adopt platforms, standards, controls, and processes.
• Strong written and spoken communication, organization, prioritization, facilitation, and follow-through on long programs.
• Collaborative leader who builds trust, resolves conflict, guides decisions, and mentors program managers.
• Minimum: bachelor's degree in computer science, engineering, information systems, or a related technical field, or equivalent practical experience.
• Minimum: 6+ years in technical program management across privacy engineering, compliance, risk management, or technical solution delivery.
• Minimum: demonstrated leadership of privacy engineering programs across several engineering or business organizations.
• Minimum: demonstrated record of turning ambiguous requirements or risk signals into measurable execution plans and results.
• Preferred: background in privacy-by-design, governing data across its lifecycle, classification, inventories, access, retention, deletion, or third-party data risk.
• Preferred: experience with GDPR, CCPA, NIST Privacy Framework, ISO 42001, NIST 2.0, ISO 27001, or comparable frameworks.
• Preferred: experience building common-control frameworks, second-line monitoring, audit evidence, risk registers, or control-health reporting.
• Preferred: hands-on work in cloud environments such as Google Cloud or AWS.
• Preferred: use of automation, scripting, workflow tools, or data analysis to improve program execution.
• Preferred: certifications in security, privacy, audit, risk, or cloud, such as CISSP, CISM, CIPM, CIPT, CIPP, or CCSP, are a plus.

Conditions

In the US, the pay zone of the work location sets the salary range. Starting pay depends on job-related skills, experience, qualifications, location, and market conditions, may be negotiable within the range, and pay zones may change.

Zone A (CA, WA, NYC): base salary of $190,000-$284,000 per year.

Zone B: base salary of $181,000-$270,000 per year.

Zone C: base salary of $162,000-$241,000 per year.

This position is eligible for equity as RSUs.

Default together policy: you are expected to work in the office 4+ days per week.

The company is an equal opportunity employer and considers qualified applicants with criminal histories in line with applicable law.

Benefits

• Paid parental leave.
• Comprehensive medical coverage.
• Emotional and mental health support programs.
• Compensation packages that let you share in the company's long-term success.