The Google Compliance team makes sure that our business is always consistent with the current financial regulations. Comprised of multitaskers, this team balances Google's legal and compliance requirements with the dynamic needs of our users and the values of our company. As part of this team, you proactively identify pain points and gaps in existing policy frameworks and find innovative solutions. You develop efficient compliance systems and work with teams to implement these across the organization. You are thorough in all you do and see to it that as Google pursues our next big idea, we always have our bases covered.
As a Functional Compliance Manager within Google Public Sector (GPS), you will lead the evolution of our compliance posture from a US-centric model to a truly global program.
In this role, you will act as a strategic enabler and team multiplier, ensuring robust security and compliance across all GPS operations, including Sovereign Deployments. You will mature the GRC function by integrating automation and refining processes to provide expert GRC support and repeatable solutions for global sovereign initiatives. Ultimately, your leadership will protect GPS and customer assets by overseeing an effective GRC framework, enabling the business to operate securely in complex regulatory environments.
Google Public Sector brings the magic of Google to the mission of government and education with solutions purpose-built for enterprises. We focus on helping United States public sector institutions accelerate their digital transformations, and we continue to make significant investments and grow our team to meet the complex needs of local, state and federal government and educational institutions.
Individual pay is determined by factors including job-related skills, experience, and relevant education or training.
US: $164000 - $239000 (USD) + 20% bonus target + equity + benefits
Learn more about
benefits at Google.
Responsibilities:
- Lead the strategic transition of our Governance, Risk, and Compliance (GRC) framework from a US-centric posture to a unified, global program. Adapt the GRC framework to support global sovereign deployments and unique international requirements.
- Mature the GRC function by integrating automation and refining processes, transforming current programs into scalable, proactive capabilities that act as a strategic enabler for the business.
- Streamline the risk management program and establish new programmatic improvements in areas like supply chain risk, vulnerability management, and global policy.
- Partner closely with cross-functional stakeholders and forward-deployed teams, providing expert GRC support and repeatable solutions for global sovereign initiatives.
Minimum qualifications:
- Bachelor's degree or equivalent practical experience.
- 10 years of experience in compliance, risk management, investigation, auditing, legal, or consulting.
- 8 years of experience in program management, security engineering, risk management, or compliance.
- Experience managing compliance, risk, or authorization processes under global government frameworks (such as FedRAMP, NIST SP 800-53, DoD Impact Levels or ISO/IEC 27000 Series).
- Must possess an active Top Secret/SCI security clearance with current polygraph.
Preferred qualifications:
- Experience utilizing scripting languages (such as Python, JavaScript, or Apps Script) or automation tools to optimize processes or compliance workflows.
- Experience applying generative AI, machine learning, or large language models (LLMs) to automate operational workflows or analyze complex datasets.
- Experience collaborating cross-functionally with engineering, security, and legal teams to implement technical security or compliance standards.
