Technology Auditor, Internal Audit

Minimum qualifications:

• Bachelor’s degree in Business, Accounting, Finance or equivalent practical experience.
• 4 years of experience in internal audit, risk or compliance roles.
• Experience supporting technical audits that utilize programming and SQL.
• Experience developing audit programs, reporting on audit findings or making recommendations for risk mitigation.
• Experience designing, implementing or testing internal controls and reviewing business processes in conjunction with underlying systems.

Preferred qualifications:

• Certifications in CISA/CISSP/PMP/CIA/CPA/CFE.
• Experience performing risk assessments, designing or implementing internal controls, and auditing platforms, hardware, devices, content moderation, online advertising, cloud technologies, content licensing, e-commerce, privacy, security, AI, or regulatory compliance.
• Understanding coding in Python, Java, C++ or comparable language, evaluating for risk and design.
• Familiarity with basic structures and principles of object-oriented programming.
• Ability to navigate through ambiguity, manage and coordinate multiple project assignments simultaneously in a changing, deadline-driven environment, accepting ownership and accountability of the process and delivering on commitments.

About the job:

As a Technology Auditor, you will advise the business and engineering groups to identify areas of risk and make recommendations on controls. You will have the opportunity to influence change and decisions for business initiatives including product launches and system implementations.

Responsibilities:

• Collaborate with business auditors and data scientists to develop/execute audit programs evaluating operational, financial, IT, and compliance risks across the Alphabet.
• Analyze audit results, draw meaningful conclusions, and provide practical, risk-based, data-driven, and actionable improvement recommendations. Prepare detailed audit reports summarizing scope, procedures, findings, and recommendations to a variety of stakeholders, including non-engineering professionals.
• Manage project workload, timelines and budgets to ensure timely completion of assigned audit initiatives. Evaluate changes to existing processes and products to identify potential risks and recommend appropriate improvements.
• Educate and advocate for the importance of controls, an effective control environment, and the value of internal audit.
• Manage relationships with stakeholders relevant to areas of domain expertise (e.g., engineering, security) and leverage to gain meaningful risk insights to influence the audit risk universe and engagement and service offering prioritization.