Privacy Assurance Testing Lead

With the widespread impact of AI technologies, the growth and diversification of our products, and the proliferation of new and evolving regulatory reporting requirements, Google operates in a dynamic global environment. The Risk, Compliance and Integrity (RCI) organization brings together critical compliance, assurance, risk, and governance functions across Google to help the company fulfill compliance commitments and empower our businesses to innovate responsibly. Our mission is to make compliance an advantage for Google by driving scaled, data-driven, and policy-based compliance programs through risk-based prioritization, robust governance, and constructive engagement with regulators and auditors. In this role, you will be a dedicated Privacy Assurance Tester to lead ongoing oversight, controls assurance, and programmatic compliance efforts across Google privacy commitments. You will operate as a critical second-line assurance lead, ensuring the company maintains strong privacy oversight, governance, and control effectiveness. You will lead end-to-end privacy assurance workstreams, drive periodic risk reviews, evaluate privacy control design adequacy, support internal and external audit engagements, and oversee remediation verification. You will partner closely with cross-functional stakeholders including Product Areas (PAs), Privacy Safety and Security (PSS), Regulatory Affairs, Policy Specialists, Legal, and Internal Audit to ensure robust assurance coverage and consistent alignment with global privacy commitments. Individual pay is determined by factors including job-related skills, experience, and relevant education or training. US: $164000 - $239000 (USD) + 20% bonus target + equity + benefits Learn more about benefits at Google .

Direct cross-functional privacy assurance programs for regulatory commitments, establishing project milestones and delivering executive posture reports. Oversee baseline testing and documentation of technical privacy controls across databases, architectures, and product lifecycles to verify operational effectiveness. Conduct risk-based control reviews to identify deficiencies, drive stakeholder remediation via governance systems, and separately validate issue resolution. Lead internal and external audit preparedness with Regulatory Affairs, coordinating technical walkthroughs, evidence collection, and observation remediation. Partner with Product, Legal, and Security teams on control design adequacy while standardizing testing playbooks and advancing automated, continuous monitoring.

Minimum qualifications: Bachelor's degree or equivalent practical experience. 10 years of experience in compliance, risk management, investigation, auditing, legal, or consulting. Experience managing cross-functional compliance or assurance programs within a technology, cloud, or global platform environment. Preferred qualifications: Professional certification in privacy, security, or audit (e.g., CIPP, CIPM, CIPT, CISA, CISSP) or a Juris Doctor (J.D.) degree Experience supporting organizations under regulatory settlements, consent decrees, or formal compliance commitments (e.g., FTC, SEC, CFPB). Experience collaborating with software engineers on privacy-by-design implementations and assurance testing readiness. Demonstrated experience conducting controls testing, process evaluations, or technical risk reviews across complex distributed systems. Multi-jurisdictional compliance experience driving cross-functional alignment and remediation governance. In-depth knowledge of global privacy frameworks and regulations (e.g., GDPR, CCPA/CPRA, EU AI Act, LGPD, HIPAA).