Privacy Assurance Testing Lead

Google; Washington (District of Columbia); On-site; USD 164,000 - 239,000; Full time

Benefits offered by this job

Health, dental, vision, life, and_dis.

401(k) with company match

Paid time off: 20 days/year

Sick time: 40 hours/year (69 Seattle)

Maternity leave: 28-30 weeks

Baby bonding leave: 18 weeks

13 paid holidays

Job summary

Google LLC in the United States is seeking a dedicated Privacy Assurance Tester to lead ongoing oversight, controls assurance, and programmatic compliance across Google privacy commitments.

You will operate as a second-line assurance lead, ensuring strong privacy governance, control effectiveness, and cross-functional collaboration with Product Areas, Legal, and Internal Audit. The role emphasizes risk reviews, design adequacy, and remediation verification.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 10 years of experience in compliance, risk management, investigation, auditing, legal, or consulting.
• Experience managing cross-functional compliance or assurance programs within a technology, cloud, or global platform environment.

Responsibilities

• Direct cross-functional privacy assurance programs for regulatory commitments, establishing project milestones and delivering executive posture reports.
• Oversee baseline testing and documentation of technical privacy controls across databases, architectures, and product lifecycles to verify operational effectiveness.
• Risk-based control reviews to identify deficiencies and drive remediation via governance systems.
• Lead internal and external audit preparedness with Regulatory Affairs, coordinating technical walkthroughs, evidence collection, and remediation.
• Partner with Product, Legal, and Security teams on control design adequacy and standardized testing playbooks.

Skills

Cross-functional leadership

Regulatory compliance

Risk management

Auditing

Education

Bachelor's degree or equivalent practical experience

Privacy/security/audit certification or J.D.

Job description

This role may also be located in our Playa Vista, CA campus.

Applicants in the County of Los Angeles: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

In accordance with Washington state law, we are highlighting our comprehensive benefits package, which is available to all eligible US based employees. Benefits for this role include:

• Health, dental, vision, life, disability insurance
• Retirement Benefits: 401(k) with company match
• Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment
• Sick Time: 40 hours/year (increased to 69 hours/year for Seattle) including 5 discretionary sick days per instance
• Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks
• Baby Bonding Leave: 18 weeks
• Holidays: 13 paid days per year

Note: By applying to this position you will have an opportunity to share your preferred working location from the following: Austin, TX, USA; Washington D.C., DC, USA; Los Angeles, CA, USA.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 10 years of experience in compliance, risk management, investigation, auditing, legal, or consulting.
• Experience managing cross-functional compliance or assurance programs within a technology, cloud, or global platform environment.

Preferred qualifications

• Professional certification in privacy, security, or audit (e.g., CIPP, CIPM, CIPT, CISA, CISSP) or a Juris Doctor (J.D.) degree
• Experience supporting organizations under regulatory settlements, consent decrees, or formal compliance commitments (e.g., FTC, SEC, CFPB).
• Experience collaborating with software engineers on privacy-by-design implementations and assurance testing readiness.
• Demonstrated experience conducting controls testing, process evaluations, or technical risk reviews across complex distributed systems.
• Multi-jurisdictional compliance experience driving cross-functional alignment and remediation governance.
• In-depth knowledge of global privacy frameworks and regulations (e.g., GDPR, CCPA/CPRA, EU AI Act, LGPD, HIPAA).

About The Job

With the widespread impact of AI technologies, the growth and diversification of our products, and the proliferation of new and evolving regulatory reporting requirements, Google operates in a dynamic global environment. The Risk, Compliance and Integrity (RCI) organization brings together critical compliance, assurance, risk, and governance functions across Google to help the company fulfill compliance commitments and empower our businesses to innovate responsibly. Our mission is to make compliance an advantage for Google by driving scaled, data-driven, and policy-based compliance programs through risk-based prioritization, robust governance, and constructive engagement with regulators and auditors.

In this role, you will be a dedicated Privacy Assurance Tester to lead ongoing oversight, controls assurance, and programmatic compliance efforts across Google privacy commitments. You will operate as a critical second-line assurance lead, ensuring the company maintains strong privacy oversight, governance, and control effectiveness.

You will lead end-to-end privacy assurance workstreams, drive periodic risk reviews, evaluate privacy control design adequacy, support internal and external audit engagements, and oversee remediation verification. You will partner closely with cross-functional stakeholders including Product Areas (PAs), Privacy Safety and Security (PSS), Regulatory Affairs, Policy Specialists, Legal, and Internal Audit to ensure robust assurance coverage and consistent alignment with global privacy commitments.

Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $164000 - $239000 (USD) + 20% bonus target + equity + benefits

Responsibilities

Learn more about benefits at Google .

• Direct cross-functional privacy assurance programs for regulatory commitments, establishing project milestones and delivering executive posture reports.
• Oversee baseline testing and documentation of technical privacy controls across databases, architectures, and product lifecycles to verify operational effectiveness.
• Risk Assessment & Remediation: Conduct risk-based control reviews to identify deficiencies, drive stakeholder remediation via governance systems, and separately validate issue resolution.
• Lead internal and external audit preparedness with Regulatory Affairs, coordinating technical walkthroughs, evidence collection, and observation remediation.
• Partner with Product, Legal, and Security teams on control design adequacy while standardizing testing playbooks and advancing automated, continuous monitoring.

Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form .