Technical Program Manager, Data Center Risk and Compliance

A problem isn’t truly solved until it’s solved for all. That’s why Googlers build products that help create opportunities for everyone, whether down the street or across the globe. As a Technical Program Manager at Google, you’ll use your technical expertise to lead complex, multi-disciplinary projects from start to finish. You’ll work with stakeholders to plan requirements, identify risks, manage project schedules, and communicate clearly with cross-functional partners across the company. You're equally comfortable explaining your team's analyses and recommendations to executives as you are discussing the technical tradeoffs in product development with engineers.

Google’s Data Center Compliance, Safety, and Risk Management (CSRM) team is a dedicated organization chartered with protecting the people and assets of Google’s global infrastructure. CSRM consists of industry leading professionals who leverage advanced security systems, dedicated guarding forces, and risk management and compliance framework programs to support Google Data Centers.

In this role, you will lead and drive the success of audits and compliance as related to Google Data Centers. You will be a thought leader who creates solutions by leveraging the expertise of partners like Cloud Compliance, Legal, Google Data Centers (GDC) Management. You will cover a region of infrastructure spaces and interact with teams in GDC to ensure the delivery, execution and optimization of the audits and compliance program.

Behind everything our users see online is the architecture built by the Technical Infrastructure team to keep it running. From developing and maintaining our data centers to building the next generation of Google platforms, we make Google's product portfolio possible. We're proud to be our engineers' engineers and love voiding warranties by taking things apart so we can rebuild them. We keep our networks up and running, ensuring our users have the best and fastest experience possible.

Responsibilities

• Drive the tactical and strategic evolution of the data center compliance program by transforming, enhancing, or deprecating processes to meet the changing needs of the organization.
• Lead the execution of localized external audits (including customer, insurance, and regulatory audits), synthesize control evidence, and prepare First Line of Defense (1LoD) site leads for external interviews.
• Serve as the primary expert on data center policies and procedures, collaborating with internal stakeholders to navigate ongoing regulations and provide perspective on compliance impacts.
• Translate master global policies into actionable steps for the first line of defense, ensuring that testing rubrics are physically executable for sites managing bespoke local mandates.
• Partner directly with site leads to flag and resolve control gaps or unmitigated risks, implementing practical fixes before they can escalate into formal audit findings.

Minimum qualifications:

• Bachelor’s degree in a technical field, or equivalent practical experience.
• 5 years of experience in program or technical project management with a focus on risk, compliance, or audit.
• Experience managing end-to-end audit processes, including interactions with external auditors or regulators.
• Experience in risk assessment and remediation.
• Experience designing and implementing programs across multiple regions or in regulatory environments.

Preferred qualifications:

• Relevant professional certifications (e.g., CISA, CRISC, CIA, PMP, CISSP).
• Master's degree or other advanced degree in a relevant field.
• 5 years of experience engaging directly with regulatory agencies.
• Experience developing and implementing strategic solutions to systemic control issues.
• Experience adapting global policies to SEA local regulations (e.g., MAS TRM, Extended Workforce Guidelines, PDPA, SS 564, Thai Cybersecurity Act, and Bank of Thailand IT Risk frameworks).
• Familiarity with data centers or other large scale industrial spaces. Exceptional problem-solving, and stakeholder management skills, with the ability to influence executive leadership.