Compliance Specialist, Data Protection and Governance

Google•Washington, DC

1d•$136,000 - $196,000

About The Position

As a part of this role, you will join the Risk, Compliance and Integrity organization (RCI), which brings together critical compliance, assurance, risk and governance functions across Google to help the company meet compliance needs and enable businesses to innovate. Your goal is to make compliance a competitive advantage for Google by driving scaled, data-driven, and policy-based compliance programs. As a Compliance Specialist, you will independently execute compliance initiatives across product domains, translating regulatory requirements into effective business controls and cross-functional programs.

Requirements

Bachelor's degree or equivalent practical experience.
7 years of experience in compliance, risk management, investigation, auditing, legal, or consulting.

Nice To Haves

Cross-functional project planning, control evaluation, and project execution.
Strong knowledge of relevant domain regulations (e.g., competition, consumer protection, privacy, or security) and adjacent risk areas.
Solid understanding of compliance program management principles and internal control frameworks (e.g., Enterprise Controls Framework).
Proven ability to collaborate and build effective working relationships with cross-functional teams.

Responsibilities

Own specs independently, reviewing and providing input before transmission to Product Areas, while advising Product Areas on compliance risk remediation during implementation.
Build compliance defensibility through regulatory-to-technical traceability matrices, formal gap analyses, control design specs, and evidence collection playbooks, and advise on Product Area control design and implementation.
Partner with Product Areas to define and implement structured, automated controls, and build scalable control catalogs and solution inventories to pay down compliance debt.
Review controls and hand them off to the Assurance for testing, while monitoring 1LoD control health, compliance design, implementation, and risk ratings to ensure credible challenge.
Conduct risk assessments and provide non-legal inputs to risk ratings, define and monitor Key Performance Indicator/ Key Risk Indicator (KPIs/KRIs) for visibility into compliance health, and review remediation plans for logged issues.