Privacy Assurance Testing Lead

Google Inc.; Austin, Los Angeles (TX, CA); On-site; USD 164,000 - 239,000; Full time

Benefits offered by this job

Health insurance

401(k) with match

Paid time off

Sick time

Maternity leave

Holidays

Job summary

Google is seeking a Privacy Assurance Testing Lead to oversee ongoing oversight, controls assurance, and programmatic compliance for privacy commitments across multiple US campuses including Austin and Los Angeles.

The role requires a senior level in compliance, risk management, and auditing with experience coordinating with Product, Legal, and Regulatory Affairs to ensure robust privacy controls and audit readiness. Individual pay includes bonuses and equity.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 10 years of experience in compliance, risk management, investigation, auditing, legal, or consulting.

Responsibilities

• Lead cross-functional privacy assurance programs for regulatory commitments.
• Oversee baseline testing and documentation of privacy controls across databases and product lifecycles.
• Coordinate internal and external audit readiness with Regulatory Affairs and Legal.
• Partner with Product, Legal, and Security teams on control design and testing playbooks.
• Drive remediation tracking and governance across multi-jurisdictional programs.

Skills

Privacy assurance

Risk management

Auditing

Cross-functional collaboration

Education

Bachelor's degree

Tools

Privacy testing tools

Job description

Google Austin, TX, USA ; Los Angeles, CA, USA ; +2 more ; +1 more

Share Privacy Assurance Testing Lead

Advanced

Experience owning outcomes and decision making, solving ambiguous problems and influencing stakeholders;deep expertise in domain.

• Copy link

This role may also be located in our Playa Vista, CA campus.

Applicants in the County of Los Angeles: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

In accordance with Washington state law, we are highlighting our comprehensive benefits package, which is available to all eligible US based employees. Benefits for this role include:

• Health, dental, vision, life, disability insurance
• Retirement Benefits: 401(k) with company match
• Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment
• Sick Time: 40 hours/year (increased to 69 hours/year for Seattle) including 5 discretionary sick days per instance
• Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks
• Baby Bonding Leave: 18 weeks
• Holidays: 13 paid days per year

Note: By applying to this position you will have an opportunity to share your preferred working location from the following: Austin, TX, USA; Los Angeles, CA, USA; Washington D.C., DC, USA.

• Bachelor's degree or equivalent practical experience.
• 10 years of experience in compliance, risk management, investigation, auditing, legal, or consulting.
• Experience managing cross-functional compliance or assurance programs within a technology, cloud, or global platform environment.

Preferred qualifications:

• Professional certification in privacy, security, or audit (e.g., CIPP, CIPM, CIPT, CISA, CISSP) or a Juris Doctor (J.D.) degree
• Experience supporting organizations under regulatory settlements, consent decrees, or formal compliance commitments (e.g., FTC, SEC, CFPB).
• Experience collaborating with software engineers on privacy-by-design implementations and assurance testing readiness.
• Demonstrated experience conducting controls testing, process evaluations, or technical risk reviews across complex distributed systems.
• Multi-jurisdictional compliance experience driving cross-functional alignment and remediation governance.
• In-depth knowledge of global privacy frameworks and regulations (e.g., GDPR, CCPA/CPRA, EU AI Act, LGPD, HIPAA).

About the job

With the widespread impact of AI technologies, the growth and diversification of our products, and the proliferation of new and evolving regulatory reporting requirements, Google operates in a dynamic global environment. The Risk, Compliance and Integrity (RCI) organization brings together critical compliance, assurance, risk, and governance functions across Google to help the company fulfill compliance commitments and empower our businesses to innovate responsibly. Our mission is to make compliance an advantage for Google by driving scaled, data-driven, and policy-based compliance programs through risk-based prioritization, robust governance, and constructive engagement with regulators and auditors.

In this role, you will be a dedicated Privacy Assurance Tester to lead ongoing oversight, controls assurance, and programmatic compliance efforts across Google privacy commitments. You will operate as a critical second-line assurance lead, ensuring the company maintains strong privacy oversight, governance, and control effectiveness.

You will lead end-to-end privacy assurance workstreams, drive periodic risk reviews, evaluate privacy control design adequacy, support internal and external audit engagements, and oversee remediation verification. You will partner closely with cross-functional stakeholders including Product Areas (PAs), Privacy Safety and Security (PSS), Regulatory Affairs, Policy Specialists, Legal, and Internal Audit to ensure robust assurance coverage and consistent alignment with global privacy commitments.

Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $164000 - $239000 (USD) + 20% bonus target + equity + benefits Learn more about benefits at Google .

• Direct cross-functional privacy assurance programs for regulatory commitments, establishing project milestones and delivering executive posture reports.
• Oversee baseline testing and documentation of technical privacy controls across databases, architectures, and product lifecycles to verify operational effectiveness.
• Conduct risk-based control reviews to identify deficiencies, drive stakeholder remediation via governance systems, and separately validate issue resolution.
• Lead internal and external audit preparedness with Regulatory Affairs, coordinating technical walkthroughs, evidence collection, and observation remediation.
• Partner with Product, Legal, and Security teams on control design adequacy while standardizing testing playbooks and advancing automated, continuous monitoring.

Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy , Know your rights: workplace discrimination is illegal , Belonging at Google , and How we hire .

Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.

To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.

Equity is granted exclusively and discretionarily by Alphabet Inc. on the basis of an agreement concluded between you and Alphabet Inc. Alphabet Inc. is your sole contractual partner with respect to equity grants. GSU grants are not guaranteed, are discretionary, are subject to approval by the Alphabet Inc. board of directors or its delegate, the terms of the relevant Alphabet Inc. stock plan, and your grant agreement. They have no impact on statutory payments. Current or past grants do not confer an acquired right.