Senior Security Auditor

Roblox; San Mateo (CA); On-site; USD 170,000 - 205,000; Full time

Job summary

Roblox Corporation in San Mateo, CA, is seeking a Senior Security Auditor to lead IT risk evaluations and readiness exercises across Roblox's internal tech environment. You will champion information security and privacy compliance, design AI-integrated audit programs, and collaborate with Engineering, Legal, Trust & Safety, and Finance to strengthen Roblox's security posture and regulatory alignment.

Reporting to the IT Audit Senior Manager, you will develop repeatable audit methods and craft

Qualifications

• Bachelor's degree in Information Technology, Information Systems, Computer Science or related field.
• 5+ years professional IT audit experience.
• 2+ years security audit or security compliance experience.
• Solid knowledge of CCPA, NIST, ISO 27001, SOC 2, PCI DSS.
• Certifications: CISSP, CISM, CIPP, CISA.
• Basic to intermediate scripting knowledge (SQL, Python, Shell).
• Experience using AI tools in audit testing and daily operations.

Responsibilities

• Establish and operationalize an audit program for CCPA compliance in California.
• Utilize AI tools and offshore resources to test control design and operating effectiveness.
• Execute and support privacy audits to address regulatory requirements and improve compliance posture.
• Lead ad hoc analyses of IT and information security data for risk-based audits.
• Maintain up-to-date understanding of evolving regulatory landscapes and build an internal knowledge base.
• Identify and implement new processes/controls to meet regulatory requirements and remediate audit findings.
• Develop audit reports summarizing findings, risks, owners, and remediation plans.
• Collaborate with cross-functional teams to create integrated Roblox compliance requirements.
• Assist with internal automation efforts and tool implementations.

Skills

IT audit

Security testing

Regulatory compliance

AI in auditing

Education

Bachelor's degree in IT/CS

CISSP/CISM/CIPP/CISA

Tools

Scripting (SQL, Python, Shell)

Job description

San Mateo, CA, United States Finance & Accounting ID: 47141

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators.

At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there.

A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone.

As a Senior Security Auditor on our Internal Audit team, you will play a pivotal role in leading IT risk evaluations, audits, and readiness exercises across Roblox's dynamic internal technology environment. In this role, you will champion information security and privacy compliance while helping scale our operational objectives. We are looking for an innovative security auditor with strong technical foundations who can design and build cutting-edge, AI-integrated audit programs. Reporting directly to the IT Audit Senior Manager, you will partner closely with key cross-functional teams—including Engineering, Information Security, Legal, Trust & Safety, and Finance to shape a secure and resilient ecosystem at Roblox.

You Will:

• Establish and operationalize an audit program to meet the cybersecurity audit requirements of the California Consumer Privacy Act (CCPA) regulations, including scoping, risk assessment, gap analysis, audit execution, remediation tracking, and reporting.
• Utilize AI tools and offshore resources to test the design and operating effectiveness of controls across the cybersecurity control domains, including access controls, data classifications, vulnerability management, production engineering security, cloud security, data security, end-point security, network security, etc.
• Execute and support privacy audits to address regulatory requirements and to help management benchmark against industry best practices, identify ways to enhance the overall compliance posture, and streamline processes through automation
• Conceive and lead ad hoc analyses of IT & Information security data to support risk-based operational audits
• Establish repeatable methods to ensure consistency in results, maintain an up-to-date understanding of evolving regulatory landscapes, and help develop a robust internal knowledge base on security compliance.
• Guide the identification and implementation of new processes/controls required by regulatory compliance frameworks, and the remediation of corrective action plans relating to audit findings
• Develop audit reports by summarizing audit findings and associated risks, identifying action owners, and aligning on remediation plans with management.
• Work with XFN teams (including Engineering, Information Security, Legal, Trust & Safety and Finance) to help create integrated compliance requirements for Roblox
• Assist with internal automation efforts and tool implementations

You Have:

• Bachelor's degree in Information Technology, Information Systems, Computer Science or a related technical field of study or equivalent experience
• 5+ years professional IT audit experience
• 2+ years security audit or security compliance experience
• Solid technical knowledge in multiple security and privacy compliance frameworks including: CCPA, NIST, ISO 27001, SOC 2, PCI DSS
• Compliance and risk management skills, CISSP, CISM, CIPP, CISA Certification
• Beginner to intermediate knowledge of scripting languages such as structured query language, Python, Shell scripting etc.)
• Use AI tools in audit testings and daily operations

Annual Salary Range

$170,200 — $204,580 USD

Roles that are based in an office are onsite Tuesday, Wednesday, and Thursday, with optional presence on Monday and Friday (unless otherwise noted).

Roblox provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Roblox also provides reasonable accommodations to candidates with qualifying disabilities or religious beliefs during the recruiting process.

For US based roles only, please note the Company may not be able to employ candidates for this role who have United States work authorization related to certain U.S. visa categories, or support future H-1B sponsorship at this time.