Cybersecurity Auditor
- linkCopy link
- emailEmail a friend
Minimum qualifications:
- Bachelor's Degree in Accounting, Business, Finance or equivalent practical experience.
- 4 years work experience in an internal audit role, with a focus on cybersecurity.
- Experience with internal controls and business processes.
Preferred qualifications:
- Certification in CISSP, CCSP, PMP, CRISC, CISA, or other related security certifications.
- Experience applying project management skills in an audit, consulting, or security environment or PMP-certified.
- Experience testing controls to determine compliance with NIST, FedRAMP, ISO 27000 series, PCI-DSS, SOC 2, CCM or other security frameworks.
- Experience in root cause analysis, security risk assessments, and technical cross-functional projects within non-standard, technical infrastructure.
- Proficiency in relational database analysis (e.g., SQL).
- Familiarity with basic structures and principles of object-oriented programming.
About the job
Internal Audit‘s mission is to protect and enable growth across Alphabet, Google and our Bets with objective, practical insights. We do this by monitoring the risk environment across Alphabet and providing insights to enable effective risk management. We work closely with teams and leadership to achieve a strong control environment that enhances and protects organizational value. We serve as one of the company’s various lines of defense for staffing and developing our team to be control experts who deliver objective and reliable results. As a member of the team, you’ll advise the business and engineering groups to identify areas of risk and make valuable recommendations on controls. You’ll have the opportunity to influence change and decisions for business initiatives including product launches and system implementations. You enjoy working in a dynamic environment, are passionate about technology and are able to focus on key issues and the details that come with it.
The name Google came from "googol," a mathematical term for the number 1 followed by 100 zeros. And nobody at Google loves big numbers like the Finance team when providing in depth analysis on all manner of strategic decisions across Google products. From developing forward-thinking analysis to generating management reports to scaling our automated financial processes, the Finance organization is an important partner and advisor to the business.
The US base salary range for this full-time position is $118,000-$174,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target salaries for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.
Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.
Responsibilities
- Work closely and build relationships with Security and Safety teams to identify the information security risk profile of a function, service, or product area and use this knowledge for audit planning and execution.
- Design and execute audit programs and procedures to scalably test and provide in-depth analysis on the design and operating effectiveness of key security controls that mitigate risks to Alphabet/Google and its users.
- Deliver audit reports to executive leadership with data-driven assurance and findings/observations and conduct follow ups with management to drive timely remediation of control gaps or deficiencies.
- Collaborate with management and users to interpret the significance of findings, conclude on those findings, and make practical recommendations.
Information collected and processed as part of your Google Careers profile, and any job applications you choose to submit is subject to Google's Applicant and Candidate Privacy Policy.
Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy, Know your rights: workplace discrimination is illegal, Belonging at Google, and How we hire.
If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form.
Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.
To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.