Engineering Program Manager, Security Compliance, Apple Services Engineering

Summary

Apple Services Engineering (ASE) team is one of the most exciting examples of Apple’s long-held passion for combining art and technology! We enable Apple’s apps and services, and we do it on an extensive scale, to hundreds of millions of customers in over 35 languages to more than 150 countries. The ASE Security Compliance team is seeking an experienced Security Compliance Engineering Program Manager to drive the development and execution of compliance programs and security audits for services that power Apple's internal and external products. Without security protections, there is no privacy. Every Apple device combines hardware, software, and services designed to work together for maximum security and a transparent user experience.

Description

We are looking for someone to manage security compliance programs within Apple Services Engineering organization.

Responsibilities

Lead all aspects of multiple concurrent security compliance projects including scope, requirements, timelines, and resource allocation
Manage a portfolio of disparate compliance obligations spanning multiple products/engineering teams in order to raise visibility and drive prioritization of compliance work
Implement privacy and security controls to satisfy legal, regulatory, and compliance requirements like GDPR, SOX, PCI, ISO and Apple’s own internal policies
Drive remediation, resolution, and improvements from audits or identified compliance gaps, often times designing comprehensive remediation activities
Develop processes in support of conducting Privacy and Security controls audits
Support Privacy and Security teams, bring clarity, set goals and expectations, and remove obstacles

Minimum Qualifications

7+ years of engineering program management in the compliance or security domain
Familiarity with cloud infrastructure, large-scale SDLC processes, security compliance frameworks (e.g., SOX, PCI-DSS, ISO27001), and security engineering
Experience managing multiple projects across cross functional teams and building scalable processes
Ability to communicate clearly and effectively partner, influence, and instill confidence with key partners and stakeholders
Experience with risk analysis as well as developing, prioritizing and leading the execution of a roadmap
Bachelor's Degree in Computer Science / Information Systems or deep relevant industry experience

Preferred Qualifications

Experience supporting SDLC engineering processes and the design/adoption of bespoke internal software products meant to support compliance outcomes.
Excellent written & verbal communication skills, along with effective presentation skills
Ability to think critically and creatively, identify risks and drive the execution across multiple teams to remediate them
Data-driven analytical skills and good judgement to extract insights and prioritize opportunities
A history of leadership, decision making, negotiation skills, and ability to influence partners without direct authority
Project Management and/or Security certifications a plus, including but not limited to: Project Management Professional (PMP), Certified ScrumMaster (CSM), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), and Certified Information Security Manager (CISM).

Application Deadline

Apple accepts applications to this posting on an ongoing basis.