Compliance Senior Specialist, Privacy and Security Policy, RCI

Compliance Senior Specialist, Privacy and Security Policy

In accordance with Washington state law, we are highlighting our comprehensive benefits package, which is available to all eligible US based employees. Benefits for this role include:

• Health, dental, vision, life, disability insurance
• Retirement Benefits: 401(k) with company match
• Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment
• Sick Time: 40 hours/year (increased to 69 hours/year for Seattle) including 5 discretionary sick days per instance
• Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks
• Baby Bonding Leave: 18 weeks
• Holidays: 13 paid days per year

Note: By applying to this position you will have an opportunity to share your preferred working location from the following: Austin, TX, USA; Chicago, IL, USA; Washington D.C., DC, USA.

Minimum qualifications: Bachelor's degree or equivalent practical experience. 10 years of experience in compliance, policy, risk management, investigation, auditing, legal, or consulting in privacy or security law. Experience with enterprise-wide/cross-functional project planning and execution. Experience with building risk-based corporate compliance programs.

Preferred qualifications: Advanced degree in a relevant field (e.g., law, business, compliance) or a privacy, security, or compliance certification. Experience in corporate compliance program management principles, risk assessment methodologies, and technical fluency with centralized functions. Experience in bringing structure to ambiguous situations and influencing decision-making at all levels. Familiarity with industry-accepted compliance policies and frameworks. Ability to identify potential risks and develop effective solutions. Ability to collaborate with cross-functional teams within RCI and with external stakeholders.

About the Job

The Risk, Compliance, and Integrity organization (RCI) brings together critical compliance, assurance, risk, and governance functions across Google to help the company meet compliance needs and enable our businesses to innovate. We manage our operations through risk-based prioritization and governance, and consistent and constructive regulator engagement. In this role, you will have an understanding of compliance frameworks, risk assessments, and internal controls, coupled with the ability to collaborate effectively across the organization and influence at all levels. You will have a bias toward action, exceptional communication skills, and a track record of building and managing compliance programs. Your program management capabilities will include a demonstrated ability to track, report on, and effectively manage compliance initiatives from inception to completion.

Responsibilities

Architect and implement an end-to-end compliance and risk management program tailored to the organization's specific needs and regulatory environment. Develop a set of clear, quantifiable metrics and key performance indicators to objectively measure and track the program's effectiveness and identify areas for improvement. Advocate for your programs, effectively communicate program status and impact to executive stakeholders, and ensure alignment on objectives. Partner with product areas to define and optimize compliance strategies. Translate legal or regulatory requirements into concrete operational workflows and testable controls. Conduct in-depth risk assessments, proactively identify potential compliance gaps, and develop and implement mitigation plans. Design and implement sophisticated control frameworks to ensure ongoing compliance with evolving regulatory landscapes and company policies.