Senior Security Auditor

Location: San Mateo, CA, United States

Department: Finance

As a Senior Security Auditor on our Internal Audit team, you will play a pivotal role in leading IT risk evaluations, audits, and readiness exercises across Roblox's dynamic internal technology environment. In this role, you will champion information security and privacy compliance while helping scale our operational objectives. We are looking for an innovative security auditor with strong technical foundations who can design and build cutting-edge, AI-integrated audit programs. Reporting directly to the IT Audit Senior Manager, you will partner closely with key cross-functional teams—including Engineering, Information Security, Legal, Trust & Safety, and Finance—to shape a secure and resilient ecosystem at Roblox.

You Will:

• Establish and operationalize an audit program to meet the cybersecurity audit requirements of the California Consumer Privacy Act (CCPA) regulations, including scoping, risk assessment, gap analysis, audit execution, remediation tracking, and reporting. 
• Utilize AI tools and offshore resources to test the design and operating effectiveness of controls across the cybersecurity control domains, including access controls, data classifications, vulnerability management, production engineering security, cloud security, data security, end-point security, network security, etc.
• Execute and support privacy audits to address regulatory requirements and to help management benchmark against industry best practices, identify ways to enhance the overall compliance posture, and streamline processes through automation 
• Conceive and lead ad hoc analyses of IT & Information security data to support risk-based operational audits
• Establish repeatable methods to ensure consistency in results, maintain an up-to-date understanding of evolving regulatory landscapes, and help develop a robust internal knowledge base on security compliance.
• Guide the identification and implementation of new processes/controls required by regulatory compliance frameworks, and the remediation of corrective action plans relating to audit findings
• Develop audit reports by summarizing audit findings and associated risks, identifying action owners, and aligning on remediation plans with management.
• Work with XFN teams (including Engineering, Information Security, Legal, Trust & Safety and Finance) to help create integrated compliance requirements for Roblox
• Assist with internal automation efforts and tool implementations

You Have:

• Bachelor's degree in Information Technology, Information Systems, Computer Science or a related technical field of study or equivalent experience
• 5+ years professional IT audit experience 
• 2+ years security audit or security compliance experience
• Solid technical knowledge in multiple security and privacy compliance frameworks including: CCPA, NIST, ISO 27001, SOC 2, PCI DSS
• Compliance and risk management skills, CISSP, CISM, CIPP, CISA Certification
• Beginner to intermediate knowledge of scripting languages such as structured query language, Python, Shell scripting etc.)
• Use AI tools in audit testings and daily operations