What you’ll do:
- Lead the design, build, and ongoing operation of security operations and risk programs that improve cyber maturity across core security foundations, including governance, intake, prioritization, escalation, and remediation follow-through.
- Define and operationalize security KRIs, KPIs, and health metrics across key domains such as vulnerability management, incident response, detection and response effectiveness, control performance, remediation timeliness, and recurring risk themes.
- Establish a consistent measurement framework, dashboarding model, and reporting taxonomy so security leaders can review trends, identify material gaps, and drive accountable action across their teams.
- Prepare and present regular business reviews for security leadership that translate technical signals into clear risk narratives, decisions, priorities, and follow-up actions.
- Build the operating cadence for security team leadership, including program reviews, metric reviews, escalation forums, and quarterly planning rhythms that connect strategy to execution.
- Establish a common organizational framework for security team OKRs, including goal setting, dependency management, milestone tracking, evidence of progress, and end-of-quarter readouts.
- Partner across Security, Engineering, Product, Infrastructure, Privacy, Legal, Compliance, and Operations to align program priorities, resolve blockers, and ensure consistent execution of risk reduction workstreams.
- Drive root-cause analysis and remediation governance for significant operational issues, ensuring lessons learned are translated into durable process, technology, or control improvements.
- Create and maintain a portfolio view of security initiatives, risks, dependencies, and commitments, and use that view to support prioritization, staffing discussions, and leadership tradeoff decisions.
- Define standard methods for risk intake, issue tracking, exception handling, escalation thresholds, and verified closure to improve consistency across the security organization.
- Improve the rigor of security operations by identifying opportunities for workflow simplification, automation, and better decision support, reducing toil while increasing transparency and accountability.
- Develop executive-ready briefing materials, scorecards, and narratives that clearly communicate program status, emerging risks, mitigation plans, and areas requiring leadership intervention.
- Monitor program performance over time and recommend changes to operating models, metrics, and review mechanisms to continuously raise the maturity of security operations and risk management practices.
Minimum qualifications:
- Bachelor's degree in computer science or a related technical field or equivalent experience
- 6+ years of experience in security advisory space, technical program management or security solution delivery
Preferred Qualifications:
- Experience with with NIST CSF 2.0, NIS2, or ISO 27001
- Experience with CISSP, CISM, CCSP, ISO 27001 Lead Implementer or similar certifications a plus
If you have a disability or special need that requires accommodation, please don’t be shy and provide us some information.
"Default Together" Policy at Snap: At Snap Inc. we believe that being together in person helps us build our culture faster, reinforce our values, and serve our community, customers and partners better through dynamic collaboration. To reflect this, we practice a “default together” approach and expect our team members to work in an office 4+ days per week.
Our Benefits: Snap Inc. is its own community, so we’ve got your back! We do our best to make sure you and your loved ones have everything you need to be happy and healthy, on your own terms. Our benefits are built around your needs and include paid parental leave, comprehensive medical coverage, emotional and mental health support programs, and compensation packages that let you share in Snap’s long-term success!
Knowledge, skills, & abilities:
- Depth of security experience and familiarity with a broad range of information security concepts and principles
- Proven experience of running critical programs within a security field
- Experience working with engineers, driving large security projects that have had a proven impact
- Exceptional verbal and written communication skills, with mastery in the ability to tailor the message to the audience
- Experience influencing teams and other cross-functional stakeholders to drive security programs
- Proficiency in, or a strong aptitude for, leveraging AI tools to streamline development, paired with the critical judgment to audit generated output for architectural integrity, performance bottlenecks, and security risks.
- Adaptability in learning and applying evolving AI systems and tools to remain at the forefront of engineering trends and modern development practices.
In the United States, work locations are assigned a pay zone which determines the salary range for the position. The successful candidate’s starting pay will be determined based on job-related skills, experience, qualifications, work location, and market conditions. The starting pay may be negotiable within the salary range for the position. These pay zones may be modified in the future.
Compensation
Zone A (CA, WA, NYC):
The base salary range for this position is $190,000-$284,000 annually.
Zone B:
The base salary range for this position is $181,000-$270,000 annually.
Zone C:
The base salary range for this position is $162,000-$241,000 annually.
This position is eligible for equity in the form of RSUs.