Privacy Assurance Testing Lead

Google•Washington, DC

3d•$164,000 - $239,000

About The Position

The Risk, Compliance and Integrity (RCI) organization brings together compliance, assurance, risk, and governance functions across Google to help fulfill compliance commitments and enable responsible innovation. Its mission is to make compliance an advantage through scaled, data-driven, and policy-based programs, risk-based prioritization, robust governance, and constructive engagement with regulators and auditors. The Privacy Assurance Testing Lead will serve as a dedicated Privacy Assurance Tester and second-line assurance lead, providing ongoing oversight, controls assurance, and programmatic compliance across Google privacy commitments. The role ensures strong privacy oversight, governance, and control effectiveness. The position leads end-to-end privacy assurance workstreams, periodic risk reviews, assessments of privacy control design adequacy, support for internal and external audits, and remediation verification. It partners with Product Areas, Privacy Safety and Security, Regulatory Affairs, Policy Specialists, Legal, and Internal Audit to provide robust assurance coverage and maintain alignment with global privacy commitments.

Requirements

Bachelor's degree or equivalent practical experience.
10 years of experience in compliance, risk management, investigation, auditing, legal, or consulting.
Experience managing cross-functional compliance or assurance programs within a technology, cloud, or global platform environment.

Nice To Haves

Professional certification in privacy, security, or audit (e.g., CIPP, CIPM, CIPT, CISA, CISSP) or a Juris Doctor (J.D.) degree.
Experience supporting organizations under regulatory settlements, consent decrees, or formal compliance commitments (e.g., FTC, SEC, CFPB).
Experience collaborating with software engineers on privacy-by-design implementations and assurance testing readiness.
Demonstrated experience conducting controls testing, process evaluations, or technical risk reviews across complex distributed systems.
Multi-jurisdictional compliance experience driving cross-functional alignment and remediation governance.
In-depth knowledge of global privacy frameworks and regulations (e.g., GDPR, CCPA/CPRA, EU AI Act, LGPD, HIPAA).

Responsibilities

Direct cross-functional privacy assurance programs for regulatory commitments, establish project milestones, and deliver executive posture reports.
Oversee baseline testing and documentation of technical privacy controls across databases, architectures, and product lifecycles to verify operational effectiveness.
Conduct risk-based control reviews, identify deficiencies, drive stakeholder remediation through governance systems, and independently validate issue resolution.
Lead internal and external audit preparedness with Regulatory Affairs, coordinating technical walkthroughs, evidence collection, and remediation of observations.
Partner with Product, Legal, and Security teams on control design adequacy, standardize testing playbooks, and advance automated, continuous monitoring.