Privacy and Security Technical Assurance, Risk, Compliance and Integrity

Google; Washington (District of Columbia); On-site; USD 136,000 - 196,000; Full time

Benefits offered by this job

Health insurance

401(k) with company match

Paid time off

Disability insurance

Maternity leave

Job summary

Google LLC is seeking a seasoned security professional to join the Risk, Compliance and Integrity organization. You will serve as a second-line leader, overseeing technical assurance and security testing across AI/ML and traditional security controls, coordinating with engineering, legal, and policy teams to drive risk-based prioritization and remediation.

You will design objectives, establish metrics, monitor remediation progress, and report to risk committees with clear testing outcomes.

Qualifications

• 7 years of experience in cybersecurity, technical assurance, IT audit, pen testing, or second line of defense risk management.
• Experience with enterprise-wide or cross-functional technical project planning and execution with legal, policy, or compliance teams.
• Experience designing and executing security control testing methodologies and risk assessments for software, infrastructure, or AI/ML systems.

Responsibilities

• Provide separate oversight and issues as a critical second line of defense function, establishing testing frameworks for AI/ML and traditional security ecosystems.
• Design and execute technical assurance testing across existing and emerging cybersecurity and AI controls to validate design and operating effectiveness.
• Lead and coordinate cross-functional security testing initiatives across AI product areas and engineering teams.
• Advocate for AI security assurance, communicating testing results, control deficiencies, threat models, and mitigation strategies to leadership and stakeholders.
• Enhance awareness of emerging AI threats, translating testing insights into actionable engineering recommendations.

Skills

Cybersecurity experience

Technical assurance

IT audit

Penetration testing

Second line of defense

Cross-functional collaboration

Security control testing methodologies

Risk assessments for AI/ML

Education

Bachelor's degree in Computer Science or related

Job description

This role may also be located in our Playa Vista, CA campus.

Applicants in the County of Los Angeles: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

In accordance with Washington state law, we are highlighting our comprehensive benefits package, which is available to all eligible US based employees. Benefits for this role include:

• Health, dental, vision, life, disability insurance
• Retirement Benefits: 401(k) with company match
• Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment
• Sick Time: 40 hours/year (increased to 69 hours/year for Seattle) including 5 discretionary sick days per instance
• Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks
• Baby Bonding Leave: 18 weeks
• Holidays: 13 paid days per year

Note: By applying to this position you will have an opportunity to share your preferred working location from the following: Austin, TX, USA; Los Angeles, CA, USA; Washington D.C., DC, USA.

Minimum qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience.
• 7 years of experience in cybersecurity, technical assurance, IT audit, pen testing, or working within a second line of defense risk management function.
• Experience with enterprise-wide or cross-functional technical project planning and execution, including partnering with legal, policy, or compliance teams.
• Experience designing and executing security control testing methodologies and risk assessments for software, infrastructure, or AI/ML systems.

Preferred qualifications

• Advanced degree in Computer Science, Cybersecurity, Artificial Intelligence, or a related field.
• Professional AI security or audit certifications such as CISSP, CISA, CISM, AIGP, AAIA, ISO 27001/42001 Lead Auditor or equivalent technical certifications.
• Experience working within a technology company or "Big Tech" ecosystem, navigating complex, hyper-scale infrastructure and distributed risk environments.
• Experience operating in a second line of defense role, including providing separate tests, control testing, and oversight to first-line business and engineering teams.
• Technical understanding of AI/ML specific vulnerabilities (e.g., adversarial attacks, training data extraction, prompt injection).

About The Job

The Risk, Compliance and Integrity organization (RCI) brings together critical compliance, assurance, risk, and governance functions across the company to help meet compliance needs and enable our businesses to innovate securely. Operating as a critical second line of defense, we manage our operations through risk-based prioritization, technical validation, oversight, and consistent engagement with product engineering and legal counsel.

In this role, you will demands a deep understanding of AI/ML architectures, offensive security testing methodologies, and threat modeling, coupled with the ability to separately test existing and emerging cybersecurity and AI controls. As a second-line leader, you will need the ability to collaborate effectively across the engineering organization, provide constructive issues, and influence at all levels.

In addition to a deep technical security foundation, this role requires exceptional program management capabilities. The successful person will have a demonstrated ability to track, report on, and effectively manage complex technical assurance initiatives from inception to completion. This includes defining clear testing objectives, establishing metrics, monitoring the first line's remediation progress, and ensuring timely and accurate reporting to engineering stakeholders and risk committees.

Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $136000 - $196000 (USD) + 15% bonus target + equity + benefits

Responsibilities

• Provide separate oversight and issues as a critical second line of defense function, establishing and maintaining comprehensive technical assurance testing frameworks for AI/ML and traditional security ecosystems.
• Design and execute technical assurance testing across both existing and emerging cybersecurity and AI controls to validate their design and operating effectiveness.
• Lead and coordinate cross-functional security testing initiatives (e.g., targeted control validation, AI red teaming, architecture reviews) to separately assess risks across AI product areas and engineering teams.
• Advocate for AI security assurance, effectively communicating testing results, control deficiencies, threat models, and mitigation strategies to first-line technical leadership, legal counsel and executive stakeholders.
• Enhance awareness of emerging AI threats, translating testing insights into actionable engineering recommendations.

Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.