Engineering Program Manager, Security Compliance, Apple Services Engineering

Apple Services Engineering (ASE) team is one of the most exciting examples of Apple's long-held passion for combining art and technology! We enable Apple's apps and services, and we do it on an extensive scale, to hundreds of millions of customers in over 35 languages to more than 150 countries. The ASE Security Compliance team is seeking an experienced Security Compliance Engineering Program Manager to drive the development and execution of compliance programs and security audits for services that power Apples internal and external products. Without security protections, there is no privacy. Every Apple device combines hardware, software, and services designed to work together for maximum security and a transparent user experience. We are looking for someone to manage security compliance programs within Apple Services Engineering organization.Lead all aspects of multiple concurrent security compliance projects including scope, requirements, timelines, and resource allocation Manage a portfolio of disparate compliance obligations spanning multiple products/engineering teams in order to raise visibility and drive prioritization of compliance work Implement privacy and security controls to satisfy legal, regulatory, and compliance requirements like GDPR, SOX, PCI, ISO and Apple's own internal policies Drive remediation, resolution, and improvements from audits or identified compliance gaps, often times designing comprehensive remediation activities Develop processes in support of conducting Privacy and Security controls audits Support Privacy and Security teams, bring clarity, set goals and expectations, and remove obstacles 7+ years of engineering program management in the compliance or security domain Familiarity with cloud infrastructure, large-scale SDLC processes, security compliance frameworks (e.g., SOX, PCI-DSS, ISO27001), and security engineering Experience managing multiple projects across cross functional teams and building scalable processes Ability to communicate clearly and effectively partner, influence, and instill confidence with key partners and stakeholders Experience with risk analysis as well as developing, prioritizing and leading the execution of a roadmap Bachelors Degree in Computer Science / Information Systems or deep relevant industry experienceExperience supporting SDLC engineering processes and the design/adoption of bespoke internal software products meant to support compliance outcomes. Excellent written & verbal communication skills, along with effective presentation skills Ability to think critically and creatively, identify risks and drive the execution across multiple teams to remediate them Data-driven analytical skills and good judgement to extract insights and prioritize opportunities A history of leadership, decision making, negotiation skills, and ability to influence partners without direct authority Project Management and/or Security certifications a plus, including but not limited to: Project Management Professional (PMP), Certified ScrumMaster (CSM), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), and Certified Information Security Manager (CISM).