Drive high-impact technical initiatives spanning multiple quarters under the Cloud Controls Uplift Strategy and Control Reporting Expansion, establishing Comply as the single, authoritative catalog aligned with ESF (NIST 800-53). Perform complex technical risk assessments, system design reviews, and threat modeling across Google Cloud products to identify technical security vulnerabilities and compliance gaps. Translate regulatory standards (e.g., ISO 27001, SOC 2, NIST, GDPR) into actionable technical control specifications, and design, implement, and automate security controls and reporting mechanisms using AI to streamline language and reduce catalog complexity.
Define Key Control Indicators and publish tailored Control Performance and Coverage Reports to drive accountability. Lead cross-functional remediation efforts, performing root-cause analysis to address underlying system-wide security risks, and provide technical leadership and mentorship to junior engineers, setting technical direction for controls engineering and assurance across the team.
Job description provided by Google.
View the original posting
