- Company Name
- Nothing
- Job Title
- Head of Privacy
- Job Description
-
**Job Title**
Head of Privacy
**Role Summary**
Senior leader responsible for defining, building, and operating a privacy‑by‑design engineering function. Owns the end‑to‑end data ecosystem, translates global privacy regulations into technical specifications, and ensures security, consent, retention, and deletion controls are embedded in product code. Partners with product, design, legal, and security teams to deliver compliant, user‑trust‑focused experiences at scale.
**Expectations**
- Deliver pragmatic privacy solutions that balance rapid product delivery with rigorous data protection.
- Provide strong technical ownership of the privacy stack, driving initiatives from ambiguous requirements to production without constant supervision.
- Establish and maintain risk‑based guardrails enabling fast feature rollout while meeting security review standards.
- Build and scale a dedicated privacy engineering team and roadmap.
**Key Responsibilities**
- Map the complete data ecosystem (signals, SDKs, cloud services, storage) to create a single source of truth.
- Convert GDPR and other regulatory frameworks into concrete engineering specs, embedding consent, retention, and deletion logic in code.
- Prioritize and remediate critical security gaps, focusing on access hygiene, pipeline security, and encryption.
- Design transparent privacy controls and user prompts in collaboration with design and brand.
- Define and enforce risk‑based guardrails for product teams, integrating security reviews into agile workflows.
- Manage relationships with external security auditors and incident response specialists; ensure compliance with global standards.
- Set long‑term strategy and investment plan for the privacy engineering function, including hiring and capability development.
**Required Skills**
- Deep technical fluency with modern cloud platforms (AWS, GCP) and API architectures.
- Strong expertise in identity and access management, encryption standards, and security best practices.
- Proven experience applying GDPR, CCPA, and related privacy regulations to consumer‑facing products.
- Ability to translate legal requirements into actionable engineering tasks.
- Excellent written and verbal communication; capable of aligning engineers, legal counsel, and leadership.
- Demonstrated leadership and ownership of privacy/security initiatives in a fast‑moving tech environment.
- Experience building or scaling privacy engineering or security architecture teams.
**Required Education & Certifications**
- Bachelor’s degree in Computer Science, Information Security, Engineering, Law, or related field (Master’s preferred).
- Relevant privacy or security certifications such as CIPP/E, CIPM, CISSP, CISM, or equivalent.