
Privacy and Security Technical Assurance, Risk, Compliance and Integrity
Washington D.C., DCJob$136–196K/yrSeen 1 day agoSeen in employer's feed 1 day ago
Most applications go out cold — see where you stand first. No sign-up to start.
Watch jobs like this. New roles like this one near Washington D.C., DC, by email.
Don't just apply. Show up ready.
Olive works from this exact posting.
At a glance
Olive lists jobs from US employers, including remote roles you can work from the United States.
Job overview
Google’s Risk, Compliance and Integrity organization seeks a technical assurance professional to provide second-line oversight across cybersecurity and AI controls. The role establishes testing frameworks, assesses control effectiveness and risks across AI product areas, and communicates findings and mitigation strategies to engineering, legal, and executive stakeholders. It also manages complex assurance initiatives, tracks remediation, and translates emerging AI threat insights into engineering recommendations.
Skills & qualifications
Skills
Qualifications
Benefits
Full job description
Privacy and Security Technical Assurance, Risk, Compliance and Integrity
Share Privacy and Security Technical Assurance, Risk, Compliance and Integrity
corporate_fare Google place Austin, TX, USA; Los Angeles, CA, USA; +2 more; +1 more
Mid
Experience driving progress, solving problems, and mentoring more junior team members; deeper expertise and applied knowledge within relevant area.
Share Privacy and Security Technical Assurance, Risk, Compliance and Integrity
info_outline
X
This role may also be located in our Playa Vista, CA campus.
Applicants in the County of Los Angeles: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.
In accordance with Washington state law, we are highlighting our comprehensive benefits package, which is available to all eligible US based employees. Benefits for this role include:
-
Health, dental, vision, life, disability insurance
-
Retirement Benefits: 401(k) with company match
-
Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment
-
Sick Time: 40 hours/year (increased to 69 hours/year for Seattle) including 5 discretionary sick days per instance
-
Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks
-
Baby Bonding Leave: 18 weeks
-
Holidays: 13 paid days per year
Note: By applying to this position you will have an opportunity to share your preferred working location from the following: Austin, TX, USA; Los Angeles, CA, USA; Washington D.C., DC, USA .
Minimum qualifications:
-
Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience.
-
7 years of experience in cybersecurity, technical assurance, IT audit, pen testing, or working within a second line of defense risk management function.
-
Experience with enterprise-wide or cross-functional technical project planning and execution, including partnering with legal, policy, or compliance teams.
-
Experience designing and executing security control testing methodologies and risk assessments for software, infrastructure, or AI/ML systems.
Preferred qualifications:
-
Advanced degree in Computer Science, Cybersecurity, Artificial Intelligence, or a related field.
-
Professional AI security or audit certifications such as CISSP, CISA, CISM, AIGP, AAIA, ISO 27001/42001 Lead Auditor or equivalent technical certifications.
-
Experience working within a technology company or "Big Tech" ecosystem, navigating complex, hyper-scale infrastructure and distributed risk environments.
-
Experience operating in a second line of defense role, including providing separate tests, control testing, and oversight to first-line business and engineering teams.
-
Technical understanding of AI/ML specific vulnerabilities (e.g., adversarial attacks, training data extraction, prompt injection).
About the job
The Risk, Compliance and Integrity organization (RCI) brings together critical compliance, assurance, risk, and governance functions across the company to help meet compliance needs and enable our businesses to innovate securely. Operating as a critical second line of defense, we manage our operations through risk-based prioritization, technical validation, oversight, and consistent engagement with product engineering and legal counsel.
In this role, you will demands a deep understanding of AI/ML architectures, offensive security testing methodologies, and threat modeling, coupled with the ability to separately test existing and emerging cybersecurity and AI controls. As a second-line leader, you will need the ability to collaborate effectively across the engineering organization, provide constructive issues, and influence at all levels.
In addition to a deep technical security foundation, this role requires exceptional program management capabilities. The successful person will have a demonstrated ability to track, report on, and effectively manage complex technical assurance initiatives from inception to completion. This includes defining clear testing objectives, establishing metrics, monitoring the first line's remediation progress, and ensuring timely and accurate reporting to engineering stakeholders and risk committees.
Individual pay is determined by factors including job-related skills, experience, and relevant education or training.
US: $136000 - $196000 (USD) + 15% bonus target + equity + benefits
Learn more aboutbenefits at Google (https://www.google.com/about/careers/applications/benefits/) .
Responsibilities
-
Provide separate oversight and issues as a critical second line of defense function, establishing and maintaining comprehensive technical assurance testing frameworks for AI/ML and traditional security ecosystems.
-
Design and execute technical assurance testing across both existing and emerging cybersecurity and AI controls to validate their design and operating effectiveness.
-
Lead and coordinate cross-functional security testing initiatives (e.g., targeted control validation, AI red teaming, architecture reviews) to separately assess risks across AI product areas and engineering teams.
-
Advocate for AI security assurance, effectively communicating testing results, control deficiencies, threat models, and mitigation strategies to first-line technical leadership, legal counsel and executive stakeholders.
-
Enhance awareness of emerging AI threats, translating testing insights into actionable engineering recommendations.
Information collected and processed as part of your Google Careers profile, and any job applications you choose to submit is subject to Google'sApplicant and Candidate Privacy Policy (./privacy-policy) .
Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See alsoGoogle's EEO Policy (https://www.google.com/about/careers/applications/eeo/) ,Know your rights: workplace discrimination is illegal (https://careers.google.com/jobs/dist/legal/EEOC\_KnowYourRights\_10\_20.pdf) ,Belonging at Google (https://about.google/belonging/) , andHow we hire (https://careers.google.com/how-we-hire/) .
If you have a need that requires accommodation, please let us know by completing ourAccommodations for Applicants form (https://goo.gl/forms/aBt6Pu71i1kzpLHe2) .
Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.
To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.
Equity is granted exclusively and discretionarily by Alphabet Inc. on the basis of an agreement concluded between you and Alphabet Inc. Alphabet Inc. is your sole contractual partner with respect to equity grants. GSU grants are not guaranteed, are discretionary, are subject to approval by the Alphabet Inc. board of directors or its delegate, the terms of the relevant Alphabet Inc. stock plan, and your grant agreement. They have no impact on statutory payments. Current or past grants do not confer an acquired right.
Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also https://careers.google.com/eeo/ and https://careers.google.com/jobs/dist/legal/OFCCP_EEO_Post.pdf If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form: https://goo.gl/forms/aBt6Pu71i1kzpLHe2.
How this job compares
Set against the 3,101 open Cybersecurity jobs on Olive Jobs, counted October 30, 2026.
- Pay
- This posting$136–196K/yr
- Washington, D.C. median$135–197K/yr40 salary ranges
- US median$135–215K/yr2,464 salary ranges
This range's midpoint, $166K, is close to the Washington, D.C. median midpoint ($166K) — in the middle half of Cybersecurity salary ranges in Washington, D.C..
- Openings
- Olive Jobs lists 56 open Cybersecurity jobs in Washington, D.C. and 3,101 across the US. 4% of them nationwide are listed as remote or flexible.
- Hiring the most in Washington, D.C.
- Deloitte6 open
- Koniag Government Services5 open
- EY4 open
- Experience
- This posting asks for at least 7 years of experience; Cybersecurity postings that state a minimum ask for 6 years at the median (2,653 postings).
- Education
- 1,542 of the 3,101 open Cybersecurity jobs (50%) ask for a bachelor's degree or higher.
Counted across the open, public US postings on Olive Jobs on October 30, 2026. Pay medians are the middle values of the low ends and of the high ends of postings that list both ends of a range in the same cadence (a yearly salary or an hourly rate); a range's midpoint is halfway between its ends. Pay and experience figures resting on fewer than 20 postings are left out.
Similar jobs, posted recently
Open roles like this one, listed in the last 30 days.
Privacy Assurance Testing LeadGoogle · Washington D.C., DC · $164–239K/yr
Security Risk and Compliance, Agent SecurityAnthropic PBC · Washington, DC
AI Security ManagerDeloitte · Washington, DC · $135–265K/yr
Senior Commercial Compliance AnalystRubrik · Remote · US · $135–203K/yr
Principal Security Compliance SpecialistAkamai Technologies, Inc. · Washington, DC (Flexible) · $132–238K/yr
You've read the whole posting — now see how you match it.