Senior Security Auditor

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. 

At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. 

A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone.

As a Senior Security Auditor on our Internal Audit team, you will play a pivotal role in leading IT risk evaluations, audits, and readiness exercises across Roblox's dynamic internal technology environment. In this role, you will champion information security and privacy compliance while helping scale our operational objectives. We are looking for an innovative security auditor with strong technical foundations who can design and build cutting-edge, AI-integrated audit programs. Reporting directly to the IT Audit Senior Manager, you will partner closely with key cross-functional teams—including Engineering, Information Security, Legal, Trust & Safety, and Finance—to shape a secure and resilient ecosystem at Roblox.

You Will:

• Establish and operationalize an audit program to meet the cybersecurity audit requirements of the California Consumer Privacy Act (CCPA) regulations, including scoping, risk assessment, gap analysis, audit execution, remediation tracking, and reporting. 


• Utilize AI tools and offshore resources to test the design and operating effectiveness of controls across the cybersecurity control domains, including access controls, data classifications, vulnerability management, production engineering security, cloud security, data security, end-point security, network security, etc.


• Execute and support privacy audits to address regulatory requirements and to help management benchmark against industry best practices, identify ways to enhance the overall compliance posture, and streamline processes through automation 


• Conceive and lead ad hoc analyses of IT & Information security data to support risk-based operational audits


• Establish repeatable methods to ensure consistency in results, maintain an up-to-date understanding of evolving regulatory landscapes, and help develop a robust internal knowledge base on security compliance.


• Guide the identification and implementation of new processes/controls required by regulatory compliance frameworks, and the remediation of corrective action plans relating to audit findings


• Develop audit reports by summarizing audit findings and associated risks, identifying action owners, and aligning on remediation plans with management.


• Work with XFN teams (including Engineering, Information Security, Legal, Trust & Safety and Finance) to help create integrated compliance requirements for Roblox


• Assist with internal automation efforts and tool implementations

You Have:

• Bachelor's degree in Information Technology, Information Systems, Computer Science or a related technical field of study or equivalent experience


• 5+ years professional IT audit experience 


• 2+ years security audit or security compliance experience


• Solid technical knowledge in multiple security and privacy compliance frameworks including: CCPA, NIST, ISO 27001, SOC 2, PCI DSS


• Compliance and risk management skills, CISSP, CISM, CIPP, CISA Certification


• Beginner to intermediate knowledge of scripting languages such as structured query language, Python, Shell scripting etc.)


• Use AI tools in audit testings and daily operations