Governance and Issue Management Analyst, gTech Risk

Socket.dev; Chicago (IL); On-site; USD 140,000 - 204,000; Full time

Benefits offered by this job

Benefits

Equity

Job summary

Google's gTech Risk team in the United States seeks a seasoned Risk Manager to lead the end-to-end incident and controls program. You will drive root-cause analyses, map findings to controls in our GRC platform, and enforce policy with clear escalation workflows.

You will participate in ERM governance forums, track remediation plans, and work with Risk Solutions Engineering to convert control gaps into automated safeguards.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 8 years of experience in a project management or a customer-facing role.

Responsibilities

• Drive robust root cause analysis (RCA) routines for all high/critical operational incidents and control failures.
• Manage the end-to-end issue management lifecycle, ensuring findings are mapped back to specific controls and issues in our Governance, Risk, and Compliance (GRC) platform.
• Enforce policy adherence and manage escalation workflows based on calibrated enterprise risk ratings.
• Facilitate Enterprise Risk Management (ERM) governance forums, tracking remediation plans and ensuring process owners meet established SLAs.
• Partner with the Risk Solutions Engineering team to ensure that identified control gaps are converted into requirements for automated technical safeguards.

Skills

Project management

Customer-facing experience

Education

Bachelor's degree or equivalent practical experience

Tools

GRC platforms

Issue tracking systems

Job description

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
• 8 years of experience in a project management or a customer-facing role.

Preferred qualifications:

• Master's degree in Business, Statistics, Mathematics, Economics, Engineering or Applied Science, or a related field.
• 8 years of experience managing projects and working with analytics, software coding, or customer-side web technologies.
• 5 years of experience in issue management, incident response, audit, or enterprise risk governance.
• Experience conducting root cause analyses and driving complex, cross-functional remediation programs.
• Experience navigating dual-rating risk frameworks and managing executive-level risk escalations.
• Familiarity with GRC platforms and issue tracking systems.

About the job:

gTech Risk helps protect Google and its users by identifying and implementing controls for significant risks. To ensure gTech's security and agility, the team analyzes gTech business processes to find control gaps, collaborates with stakeholders to resolve these gaps, and provides risk expertise to engineer innovative solutions.

Within this organization, the Risk Strategy & Engagement pillar serves as the strategic intelligence core and the primary bridge to our business partners. We are transitioning gTech from a reactive, manual risk model to an automated, intelligence driven risk operating system.

Google creates products and services that make the world a better place, and gTech's role is to help bring them to life. Our teams of trusted advisors support customers globally. Our solutions are rooted in our technical skill, product expertise, and a thorough understanding of our customers' complex needs. Whether the answer is a bespoke solution to solve a unique problem, or a new tool that can scale across Google, everything we do aims to ensure our customers benefit from the full potential of Google products.

To learn more about gTech, check out our video.Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $140000 - $204000 (USD) + 15% bonus target + equity + benefits

Learn more about benefits at Google.

Responsibilities:

• Drive robust root cause analysis (RCA) routines for all high/critical operational incidents and control failures.
• Manage the end-to-end issue management lifecycle, ensuring findings are mapped back to specific controls and issues in our Governance, Risk, and Compliance (GRC) platform.
• Enforce policy adherence and manage escalation workflows based on calibrated enterprise risk ratings.
• Facilitate Enterprise Risk Management (ERM) governance forums, tracking remediation plans and ensuring process owners meet established SLAs.
• Partner with the Risk Solutions Engineering team to ensure that identified control gaps are converted into requirements for automated technical safeguards.