Privacy Auditor, Internal Audit

About the job

As a member of the team, you will advise the business and engineering groups to identify areas of risk and make recommendations on controls. You will have the opportunity to influence change and decisions for business initiatives including product launches and system implementations.

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
• 4 years of experience in Internal Audit, Risk, or Compliance roles with a focus on Privacy and Data Governance.
• Experience with privacy concepts (e.g., anonymization, consent, data portability notification, etc.).
• Experience designing, implementing, or testing internal controls and reviewing business processes in conjunction with underlying systems.
• Experience developing audit programs, reporting on audit findings, or making recommendations for risk mitigation.

Preferred qualifications:

• CIPP, CISSP, CISA, or related privacy or audit certifications.
• Experience with relational database analysis (e.g. SQL).
• Experience with structures and principles of object-oriented programming, such as Python, Java, C++ or comparable language, evaluating for risk and design.
• Experience performing risk assessments, designing or implementing internal controls, and auditing platforms, hardware, and devices, content moderation, online advertising, cloud technologies, content licensing, e-commerce, privacy, security, AI, or regulatory compliance.
• Ability to navigate through ambiguity, manage and coordinate multiple project assignments simultaneously in a fast-paced, deadline-driven environment, while accepting ownership and accountability of the process and delivering on commitments.

Responsibilities

• Work with Privacy and Data Governance teams to understand the privacy risk profile for audit planning and execution.
• Design and execute audit programs and procedures to test and provide analysis on the design and operating of privacy controls that mitigate risks.
• Analyze audit results, draw conclusions, and provide practical, risk-based, data-driven recommendations for improvement.
• Prepare detailed audit reports summarizing scope, procedures, findings, and recommendations.
• Manage relationships with stakeholders and leverage to gain risk insights to influence the Audit Risk Universe and engagement and service offering prioritization.