Strategic Risk & Policy Analyst, GRC & Compliance

Google; Chicago (IL); On-site; USD 114,000 - 163,000; Full time

Job summary

Google’s gTech Risk team in Chicago, IL, is seeking an ERM and Policy Analyst, Risk Assessment to help identify controls for significant risks affecting Google products and workflows. The role focuses on codifying policy and regulatory obligations into clear requirements while driving a data‑driven risk delivery model.

You will collaborate with stakeholders to scale secure solutions, advancing governance, risk assessment, and compliance across gTech product launches.

Qualifications

• Bachelor’s degree or equivalent practical experience.
• 5 years of experience in a project management or a customer-facing role.

Responsibilities

• Manage Google risk assessment frameworks and establish the minimum control standards required for all gTech product and workflow launches.
• Lead the consolidation and migration of gTech risk data into the enterprise platform, establishing a resilient source of truth for gTech’s risk data.
• Distill and map complex risk obligations across gTech’s processes.
• Conduct analyses and policy obligation mapping to ensure clear understanding of operational risks and identify risks to continuity for critical processes.
• Perform systemic control mapping and gap identification, transitioning the organization from anecdotal assessments to standardized, evidence based compliance by design.

Education

Bachelor’s degree or equivalent practical experience

Master’s degree in Business, Statistics, Mathematics, Economics, Engineering or Applied Science, or a related field

Job description

Google’s gTech Risk team in Chicago, IL, is seeking an ERM and Policy Analyst, Risk Assessment to help identify controls for significant risks affecting Google products and workflows. The role focuses on codifying policy and regulatory obligations into clear requirements while driving a data‑driven risk delivery model.

You will collaborate with stakeholders to scale secure solutions, advancing governance, risk assessment, and compliance across gTech product launches.