Privacy and Security Technical Assurance, Risk, Compliance and Integrity

Google•Washington, DC

10d•$136,000 - $196,000

About The Position

The Risk, Compliance and Integrity organization (RCI) brings together compliance, assurance, risk, and governance functions across the company to address compliance needs and help businesses innovate securely. It operates as a second line of defense through risk-based prioritization, technical validation, oversight, and engagement with product engineering and legal counsel. This role requires deep understanding of AI/ML architectures, offensive security testing methodologies, and threat modeling, along with the ability to independently test existing and emerging cybersecurity and AI controls. The role collaborates across engineering, provides constructive findings, and influences stakeholders at all levels. It also requires strong program management: tracking and reporting complex technical assurance initiatives, defining testing objectives and metrics, monitoring remediation progress, and ensuring timely, accurate reporting to engineering stakeholders and risk committees.

Requirements

Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience.
7 years of experience in cybersecurity, technical assurance, IT audit, penetration testing, or a second line of defense risk management function.
Experience with enterprise-wide or cross-functional technical project planning and execution, including partnering with legal, policy, or compliance teams.
Experience designing and executing security control testing methodologies and risk assessments for software, infrastructure, or AI/ML systems.
Deep understanding of AI/ML architectures, offensive security testing methodologies, and threat modeling.
Ability to independently test cybersecurity and AI controls and collaborate effectively across engineering organizations.
Strong program management capabilities, including tracking, reporting, and managing complex technical assurance initiatives through completion.

Nice To Haves

Advanced degree in Computer Science, Cybersecurity, Artificial Intelligence, or a related field.
Professional AI security or audit certifications such as CISSP, CISA, CISM, AIGP, AAIA, ISO 27001/42001 Lead Auditor, or equivalent technical certifications.
Experience working within a technology company or Big Tech ecosystem, navigating complex, hyperscale infrastructure and distributed risk environments.
Experience in a second line of defense role, including separate testing, control testing, and oversight of first-line business and engineering teams.
Technical understanding of AI/ML-specific vulnerabilities, such as adversarial attacks, training data extraction, and prompt injection.

Responsibilities

Provide separate oversight and issue management as a critical second line of defense, establishing and maintaining comprehensive technical assurance testing frameworks for AI/ML and traditional security ecosystems.
Design and execute technical assurance testing of existing and emerging cybersecurity and AI controls to validate their design and operating effectiveness.
Lead and coordinate cross-functional security testing initiatives, such as targeted control validation, AI red teaming, and architecture reviews, to separately assess risks across AI product areas and engineering teams.
Advocate for AI security assurance by communicating testing results, control deficiencies, threat models, and mitigation strategies to first-line technical leadership, legal counsel, and executive stakeholders.
Enhance awareness of emerging AI threats and translate testing insights into actionable engineering recommendations.