About the job

Internal Audit‘s mission is to focus on reducing risk across Alphabet. We do this by monitoring the risk environment across Alphabet and providing insights to enable effective risk management. We work closely with teams and leadership to achieve a strong control environment that enhances and protects organizational value. We serve as one of the company’s various lines of defense for staffing and developing our team to be control experts who deliver objective and reliable results.

As a member of the team, you will advise the business and engineering groups to identify areas of risk and make valuable recommendations on controls. You will have the opportunity to influence change and decisions for business initiatives including product launches and system implementations.

In this role, you will lead cross-functional audit initiatives at Alphabet, partnering with data scientists and business auditors to evaluate risk across operational, financial, and tech domains. You will be translating complex data into actionable, risk-based recommendations for stakeholders, including non-technical audiences.
The US base salary range for this full-time position is $148,000-$215,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.

Responsibilities

• Drive the audit process and deliverables by collaborating with business auditors and data scientists to develop and execute programs evaluating operational, financial, technology, and compliance risks.

• Analyze audit results to draw meaningful conclusions, and provide practical, risk-based, data-driven, and actionable improvement recommendations; prepare audit reports summarizing scope, procedures, findings, and recommendations to a variety of stakeholders.

• Manage project workload, timelines and budgets to ensure timely completion of assigned audit initiatives; evaluate changes to existing processes and products to identify potential risks and recommend appropriate improvements.

• Educate and advocate for the importance of robust controls, effective control environment, and the value of internal audit.

• Manage relationships with stakeholders relevant to areas of domain expertise (e.g., engineering, security) and leverage to gain meaningful risk insights to influence the audit risk universe and engagement and service offering prioritization.

Minimum qualifications

• Bachelor’s degree in Computer Science, Informations Systems, Management Information Systems, Finance, Accounting, Business or equivalent practical experience.

• 7 years of experience in internal audit, risk or compliance roles.

• Experience identifying and analyzing risks and internal controls in business and technology processes.

• Experience developing and leading audit programs, reporting on audit findings or making recommendations for risk mitigation.

Preferred qualifications

• Certifications in CISA/CISSP/PMP/CIA or equivalent.

• Experience in relational database analysis (e.g., SQL).

• Experience performing risk assessments, designing or implementing internal controls, and auditing data platforms, shared software development and deployment ecosystems, Identity and Access Management (IAM) frameworks, AI, or regulatory compliance.

• Familiarity with basic structures and principles of object-oriented programming.

• Understanding of coding in Python, Java, C++ or comparable language, evaluating for risk and design.

• Ability to navigate through ambiguity, manage and coordinate multiple project assignments simultaneously in a fast-paced, deadline-driven environment, accepting ownership and accountability of the process and delivering on commitments.