Google Internal Audit Jobs in Virginia (NOW HIRING)

Minimum qualifications:

• Bachelor's degree in a technical field, or equivalent practical experience.
• 5 years of experience in program management with a focus on information and technology compliance and audit programs for hardware or software.
• Experience with regulatory requirements, data center operations, risk assessments, internal controls, and security controls.

Preferred qualifications:

• Relevant Certifications such as CISSP, CISA, CISM, or other related certifications and ability to travel up to 25% of the time as needed.
• Experience in people management.
• Experience in areas like large-scale program management, change management, communication strategy, and PgM generalist work.
• Strong people and communications skills and open to feedback.
• Attention to detail, time management, and ability to grow in an ambiguous environment.
• Mindset for innovation, continuous improvement and desire to exceed business expectations.

About the job
Google's projects, like our users, span the globe and require managers to keep the big picture in focus while being able to dive into the unique engineering challenges we face daily. As a Technical Program Manager at Google, you lead complex, multi-disciplinary engineering projects using your engineering expertise. You plan requirements with internal customers and usher projects through the entire project lifecycle. This includes managing project schedules, identifying risks and clearly communicating them to project stakeholders. You're equally at home explaining your team's analyses and recommendations to executives as you are discussing the technical trade-offs in product development with engineers.
Using your extensive technical and leadership expertise, you manage various Engineering-specific programs and teams.
As a Technical Program Manager for Strategic Policy, Assurance, Risk, and Compliance (SPARC), you will be responsible for driving assurance programs and managing audits across country-level or multi-site domains. These environments often feature evolving regulatory landscapes and unique local requirements. You will play a key role in coordinating proactive assurance activities, managing localized external audits from end-to-end, and translating global risk and compliance frameworks into actionable, localized execution plans for operational teams (the First Line of Defense). This includes facilitating control testing, managing country-specific compliance programs, and partnering with site leads to address identified control gaps or risks. You will also be responsible for synthesizing control evidence and preparing teams for external audit interviews. You will be required to navigate ambiguity and ensure global policies are effectively implemented in a way that meets specific local needs.
Behind everything our users see online is the architecture built by the Technical Infrastructure team to keep it running. From developing and maintaining our data centers to building the next generation of Google platforms, we make Google's product portfolio possible. We're proud to be our engineers' engineers and love voiding warranties by taking things apart so we can rebuild them. We keep our networks up and running, ensuring our users have the best and fastest experience possible.
Individual pay is determined by factors including job-related skills, experience, and relevant education or training.
US: $163000 - $236000 (USD) 15% bonus target equity benefits
Learn more about benefits at Google .
Responsibilities

• Lead cross-functional development of the data center compliance program, acting as a regional SME to incubate scalable solutions and optimize processes.
• Oversee complex compliance audits and defend the business during critical regulatory escalations, validating assurance outputs for external auditors.
• Resolve chronic, multi-site control failures by partnering with executive leaders to build scalable risk remediation plans and perform follow-up testing.
• Design operational workflows that seamlessly reconcile global control frameworks with local laws, ensuring compliance without sacrificing business velocity.
• Assess infrastructure against standards like FedRAMP, SOC 2, ISO 27001, and PCI DSS, advising internal teams to ensure continuous audit readiness.

Information collected and processed as part of your Google Careers profile, and any job applications you choose to submit is subject to Google's Applicant and Candidate Privacy Policy .
Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy , Know your rights: workplace discrimination is illegal , Belonging at Google , and How we hire .
If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form .
Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.
To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.
Equity is granted exclusively and discretionarily by Alphabet Inc. on the basis of an agreement concluded between you and Alphabet Inc. Alphabet Inc. is your sole contractual partner with respect to equity grants. GSU grants are not guaranteed, are discretionary, are subject to approval by the Alphabet Inc. board of directors or its delegate, the terms of the relevant Alphabet Inc. stock plan, and your grant agreement. They have no impact on statutory payments. Current or past grants do not confer an acquired right.