"Internal Audit" is pretty common. Though I wouldn't just assume they would take your side. Whistleblowing is tricky business. Someone may decide that the public tarnish of "it happened" is worse than letting it slide.

A lot of the larger ones have a Code of Business Ethics and is a required training you take yearly. Either Netflix didn't have this, or this guy just didn't care.

In my experience, Business Ethics exists to silence whistleblowers. In either case they have about as much influence over executive prerogative as diversity offices have — the people who make the decisions will never give them enough power to question decisions at or above the VP level because they don’t want their own decisions investigated.

It depends. If it puts the company at legal risk, they're pretty quick to act in all companies I've been at.

If it puts the company at just PR risk, varies by company whether they will do anything or participate in the cover up.