Cyber Security Internal Audit Expert

Google; United States; On-site; USD 124,000 - 177,000; Full time

Job summary

Google is seeking a Cyber Security Auditor within Internal Audit to drive risk reduction across the Alphabet. You will partner with security and engineering teams to identify cyber-risk, design audit programs, and test security controls at scale for users and systems.

You will execute audits, analyze findings, and deliver practical recommendations while navigating a fast-paced environment and multiple concurrent projects. The role reports to the Internal Audit function at Google.

Qualifications

• Bachelor’s degree in Business, Accounting, Finance or equivalent practical experience.
• 4 years of experience in internal audit, risk or compliance roles.
• Experience supporting technical audits that utilize programming and SQL.
• Experience working with relational database analysis.

Responsibilities

• Build close working relationships with Security and Safety teams to understand the information security risk profile of a function, service, or product area and apply this knowledge to audit planning and execution.
• Design and execute audit programs and procedures to test and provide in-depth analysis on the design and operating effectiveness of key security controls that mitigate risks to Alphabet/Google and its Users at scale.
• Analyze audit results to draw meaningful conclusions and provide practical, risk-based, data-driven, and actionable recommendations for improvement.
• Prepare detailed audit reports summarizing scope, procedures, findings, and recommendations.
• Manage relationships with stakeholders relevant to areas of domain expertise (ex. Core, Security, Engineering) and leverage to gain meaningful risk insights to influence the Audit Risk Universe and engagement and service offering prioritization.

Skills

Internal audit

Risk management

SQL

Relational databases

Education

Bachelor’s degree in Business, Accounting, Finance or equivalent practical experience

Tools

Python

Java

C++

Job description

Google is seeking a Cyber Security Auditor within Internal Audit to drive risk reduction across the Alphabet. You will partner with security and engineering teams to identify cyber-risk, design audit programs, and test security controls at scale for users and systems.

You will execute audits, analyze findings, and deliver practical recommendations while navigating a fast-paced environment and multiple concurrent projects. The role reports to the Internal Audit function at Google.