Privacy Assurance Testing Lead
- linkCopy link
- emailEmail a friend
This role may also be located in our Playa Vista, CA campus.
Applicants in the County of Los Angeles: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.
In accordance with Washington state law, we are highlighting our comprehensive benefits package, which is available to all eligible US based employees. Benefits for this role include:
- Health, dental, vision, life, disability insurance
- Retirement Benefits: 401(k) with company match
- Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment
- Sick Time: 40 hours/year (increased to 69 hours/year for Seattle) including 5 discretionary sick days per instance
- Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks
- Baby Bonding Leave: 18 weeks
- Holidays: 13 paid days per year
Minimum qualifications:
- Bachelor's degree or equivalent practical experience.
- 10 years of experience in compliance, risk management, investigation, auditing, legal, or consulting.
- Experience managing cross-functional compliance or assurance programs within a technology, cloud, or global platform environment.
Preferred qualifications:
- Professional certification in privacy, security, or audit (e.g., CIPP, CIPM, CIPT, CISA, CISSP) or a Juris Doctor (J.D.) degree
- Experience supporting organizations under regulatory settlements, consent decrees, or formal compliance commitments (e.g., FTC, SEC, CFPB).
- Experience collaborating with software engineers on privacy-by-design implementations and assurance testing readiness.
- Demonstrated experience conducting controls testing, process evaluations, or technical risk reviews across complex distributed systems.
- Multi-jurisdictional compliance experience driving cross-functional alignment and remediation governance.
- In-depth knowledge of global privacy frameworks and regulations (e.g., GDPR, CCPA/CPRA, EU AI Act, LGPD, HIPAA).
About the job
With the widespread impact of AI technologies, the growth and diversification of our products, and the proliferation of new and evolving regulatory reporting requirements, Google operates in a dynamic global environment. The Risk, Compliance and Integrity (RCI) organization brings together critical compliance, assurance, risk, and governance functions across Google to help the company fulfill compliance commitments and empower our businesses to innovate responsibly. Our mission is to make compliance an advantage for Google by driving scaled, data-driven, and policy-based compliance programs through risk-based prioritization, robust governance, and constructive engagement with regulators and auditors.
In this role, you will be a dedicated Privacy Assurance Tester to lead ongoing oversight, controls assurance, and programmatic compliance efforts across Google privacy commitments. You will operate as a critical second-line assurance lead, ensuring the company maintains strong privacy oversight, governance, and control effectiveness.
You will lead end-to-end privacy assurance workstreams, drive periodic risk reviews, evaluate privacy control design adequacy, support internal and external audit engagements, and oversee remediation verification. You will partner closely with cross-functional stakeholders including Product Areas (PAs), Privacy Safety and Security (PSS), Regulatory Affairs, Policy Specialists, Legal, and Internal Audit to ensure robust assurance coverage and consistent alignment with global privacy commitments.
Individual pay is determined by factors including job-related skills, experience, and relevant education or training.
US: $164000 - $239000 (USD) + 20% bonus target + equity + benefits
Learn more about benefits at Google.
Responsibilities
- Direct cross-functional privacy assurance programs for regulatory commitments, establishing project milestones and delivering executive posture reports.
- Oversee baseline testing and documentation of technical privacy controls across databases, architectures, and product lifecycles to verify operational effectiveness.
- Conduct risk-based control reviews to identify deficiencies, drive stakeholder remediation via governance systems, and separately validate issue resolution.
- Lead internal and external audit preparedness with Regulatory Affairs, coordinating technical walkthroughs, evidence collection, and observation remediation.
- Partner with Product, Legal, and Security teams on control design adequacy while standardizing testing playbooks and advancing automated, continuous monitoring.
Information collected and processed as part of your Google Careers profile, and any job applications you choose to submit is subject to Google's Applicant and Candidate Privacy Policy.
Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy, Know your rights: workplace discrimination is illegal, Belonging at Google, and How we hire.
If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form.
Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.
To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.
Equity is granted exclusively and discretionarily by Alphabet Inc. on the basis of an agreement concluded between you and Alphabet Inc. Alphabet Inc. is your sole contractual partner with respect to equity grants. GSU grants are not guaranteed, are discretionary, are subject to approval by the Alphabet Inc. board of directors or its delegate, the terms of the relevant Alphabet Inc. stock plan, and your grant agreement. They have no impact on statutory payments. Current or past grants do not confer an acquired right.