Loading
A
Principal Security Engineering Program Manager - China Security & Infrastructure, Apple Services Engineering
AppleSeattle, Washington, United StatesSenior$196,900 - $354,10010+ years
Apply Apple Services Engineering (ASE) team is one of the most exciting examples of Apple's long-held passion for combining art and technology! We enable Apple's apps and services, and we do it on an extensive scale, to hundreds of millions of customers in over 35 languages to more than 150 countries.
The ASE Security team is seeking a highly experienced Security Engineering Program Manager to lead our China Security and Infrastructure compliance initiatives. Within ASE, you will work with and influence colleagues across Apple, interface with Chinese regulators, and advise Apple leadership to ensure our services meet stringent security and regulatory objectives in mainland China. As our work is integral through the entire software and infrastructure stack, you will have the opportunity to work with a wide variety of engineering, legal, privacy, and government affairs teams across Apple. We cultivate strong relationships, build trust, and influence without direct authority. We communicate openly and clearly, collaborate enthusiastically, and value a diverse culture of healthy debate. Do these points resonate with you? If so, we want to talk!
As the Security Engineering Program Manager for China Security & Infrastructure in ASE, you are a strategic leader and functional expert in the intersection of enterprise security, cloud infrastructure, and regulatory compliance at scale. While working directly with ASE engineering teams, legal counsel, and cross-functional partners, you will define and drive the overarching security and compliance strategy for all Apple services operating in mainland China. This will include navigating complex regulatory landscapes, driving large-scale infrastructure security improvements, and representing Apple's technical security posture to Chinese regulators and internal executives. You will be responsible for identifying, planning, and delivering critical security outcomes by autonomously engaging a broad set of internal and external stakeholders, balancing rigorous compliance requirements with Apple's high standards for privacy and user experience.
- Define and operationalize the strategic roadmap for China security and infrastructure compliance across all Apple services.
- Act as the primary technical program leader leading programs and efforts to work with Chinese regulators, legal teams, and government affairs to ensure technical alignment with local cybersecurity and data privacy laws (e.g., MLPS, PIPL, Etc ).
- Advise and present to Apple executive leadership on regulatory risks, compliance posture, and strategic infrastructure investments.
- Manage highly complex, cross-functional dependencies, risks, and changes effectively by optimizing scope, schedule, and resources across multiple global engineering organizations.
- Play a key part in shaping technical architecture and design, collaborating closely with senior engineers and architects to ensure infrastructure in mainland China meets both Apple's security bar and local regulatory mandates.
- Lead through ambiguity, influencing peers, stakeholders, and executives to build consensus and drive critical initiatives without direct authority.
- Develop and own comprehensive communication plans to effectively and proactively communicate program status, regulatory shifts, and systemic risks to stakeholders at all levels.
- Leverage data and deep technical insights to drive strategic decisions, prioritization, and resource allocation at the highest levels of the company.
- 10+ years of experience in program management, with a significant focus on infrastructure security and compliance OR a combination of 5+ years program management with an additional 5+ years in a related field such as engineering leadership, security engineering or technical architecture.
- Regulatory Expertise: Deep expertise in China's regulatory landscape, specifically regarding cybersecurity, data localization, and privacy laws.
- External Representation: Proven track record of successfully interfacing with government regulators, auditors, and legal teams on complex technical security matters.
- Executive Presence: Exceptional communication skills with the ability to convey complex technical and regulatory information to both technical audiences and executive leadership with clarity, confidence, and alignment.
- Strategic Leadership: Experience leading large-scale, highly matrixed, cross-functional programs across global time zones, driving alignment from kick-off to successful deployment.
- Technical Proficiency: A solid understanding of cloud-native infrastructure, distributed systems, network architecture, and enterprise security controls to credibly partner with and challenge senior engineering teams.
- Risk Management Skills: Advanced ability to identify, assess, and prioritize systemic security and compliance risks, and drive the execution across multiple organizations to remediate them.
- Advanced degree in Computer Science, Information Security, Law, or a related field or equivalent professional experience
- Prior experience operating autonomously as an TPM or EPM in a massive-scale enterprise technology company partnering with Sr. Executives to deliver time-critical work.
- Experience with cloud security architectures and joint venture/partner-operated infrastructure models in China.
- Industry certifications in security, privacy, or compliance (e.g., CISSP, CISM, CIPP/A).