Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators.
At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there.
A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone.
As a Senior Security Auditor on our Internal Audit team, you will play a pivotal role in leading IT risk evaluations, audits, and readiness exercises across Roblox's dynamic internal technology environment. In this role, you will champion information security and privacy compliance while helping scale our operational objectives. We are looking for an innovative security auditor with strong technical foundations who can design and build cutting-edge, AI-integrated audit programs. Reporting directly to the IT Audit Senior Manager, you will partner closely with key cross-functional teams—including Engineering, Information Security, Legal, Trust & Safety, and Finance—to shape a secure and resilient ecosystem at Roblox.
You Will:
- Establish and operationalize an audit program to meet the cybersecurity audit requirements of the California Consumer Privacy Act (CCPA) regulations, including scoping, risk assessment, gap analysis, audit execution, remediation tracking, and reporting.
- Utilize AI tools and offshore resources to test the design and operating effectiveness of controls across the cybersecurity control domains, including access controls, data classifications, vulnerability management, production engineering security, cloud security, data security, end-point security, network security, etc.
- Execute and support privacy audits to address regulatory requirements and to help management benchmark against industry best practices, identify ways to enhance the overall compliance posture, and streamline processes through automation
- Conceive and lead ad hoc analyses of IT & Information security data to support risk-based operational audits
- Establish repeatable methods to ensure consistency in results, maintain an up-to-date understanding of evolving regulatory landscapes, and help develop a robust internal knowledge base on security compliance.
- Guide the identification and implementation of new processes/controls required by regulatory compliance frameworks, and the remediation of corrective action plans relating to audit findings
- Develop audit reports by summarizing audit findings and associated risks, identifying action owners, and aligning on remediation plans with management.
- Work with XFN teams (including Engineering, Information Security, Legal, Trust & Safety and Finance) to help create integrated compliance requirements for Roblox
- Assist with internal automation efforts and tool implementations
You Have:
- Bachelor's degree in Information Technology, Information Systems, Computer Science or a related technical field of study or equivalent experience
- 5+ years professional IT audit experience
- 2+ years security audit or security compliance experience
- Solid technical knowledge in multiple security and privacy compliance frameworks including: CCPA, NIST, ISO 27001, SOC 2, PCI DSS
- Compliance and risk management skills, CISSP, CISM, CIPP, CISA Certification
- Beginner to intermediate knowledge of scripting languages such as structured query language, Python, Shell scripting etc.)
- Use AI tools in audit testings and daily operations
For roles that are based at our headquarters in San Mateo, CA: The starting base pay for this position is as shown below. The actual base pay is dependent upon a variety of job-related factors such as professional background, training, work experience, location, business needs and market demand. Therefore, in some circumstances, the actual salary could fall outside of this expected range. This pay range is subject to change and may be modified in the future. All full-time employees are also eligible for equity compensation and for benefits as described on this page.
Roles that are based in an office are onsite Tuesday, Wednesday, and Thursday, with optional presence on Monday and Friday (unless otherwise noted).
Roblox provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Roblox also provides reasonable accommodations to candidates with qualifying disabilities or religious beliefs during the recruiting process.
For US based roles only, please note the Company may not be able to employ candidates for this role who have United States work authorization related to certain U.S. visa categories, or support future H-1B sponsorship at this time.