Role Description
Conduct formal, end-to-end written privacy reviews for products, features, research publications, data pipelines, and experimental prototypes.
-
Evaluate privacy risks and recommend practical safeguards aligned with internal standards and applicable global regulations.
-
Manage reviews from initial discovery and risk identification through remediation and final approval.
-
Provide strategic guidance and support the escalation of complex or high-risk privacy matters.
-
Maintain accurate, detailed, and audit-ready assessment documentation.
-
Assess the privacy implications of AI, machine learning, generative AI, and Large Language Model systems.
-
Evaluate data ingestion, prompt inputs, context windows, model outputs, training workflows, inference processes, and human-in-the-loop oversight.
-
Identify potential risks involving personal data, data leakage, memorization, secondary use, data retention, and inappropriate model outputs.
-
Recommend appropriate privacy controls for experimental and production AI systems.
-
Support the responsible development and launch of emerging AI capabilities.
-
Review technical design documents, Product Requirements Documents, Business Requirements Documents, system architecture diagrams, data-lineage documentation, and academic publications.
-
Identify privacy touchpoints, data dependencies, and potential gaps across product and data-processing lifecycles.
-
Translate privacy, legal, and compliance requirements into practical and actionable guidance for product and engineering teams.
-
Evaluate complex product scenarios in which requirements, risks, or ownership may not yet be clearly defined.
-
Partner with product managers, software engineers, data scientists, legal teams, and privacy stakeholders to incorporate privacy controls throughout the product lifecycle.
-
Evaluate controls relating to notice and consent, transparency, user choice, data portability, data minimization, access, and retention.
-
Review data-collection practices, consent flows, access controls, privacy policies, and user-facing privacy notices.
-
Help teams make informed product decisions that balance innovation, regulatory obligations, and user trust.
-
Identify gaps in existing privacy-review processes and recommend operational improvements.
-
Develop and refine privacy frameworks, standard operating procedures, guidelines, templates, and review criteria.
-
Support operational reporting and program-management activities across the privacy lifecycle.
-
Use custom tools and AI technologies to automate workflows, improve review efficiency, and optimize governance operations.
-
Help establish consistent and scalable privacy-review practices across research and innovation teams.
Qualifications
-
Extensive hands-on experience conducting formal written privacy reviews, assessments, or impact analyses.
-
Product-focused privacy experience within technology, digital platforms, cloud services, AI, or similarly complex environments.
-
An active IAPP certification in at least one of the following: Artificial Intelligence Governance Professional, Certified Information Privacy Professional/United States, Certified Information Privacy Professional/Europe, Certified Information Privacy Manager.
-
Practical knowledge of AI and machine learning data-processing workflows, generative AI applications, and Large Language Models.
-
Understanding of privacy risks associated with model-training data, user inputs, inference processes, and model outputs.
-
Deep knowledge of privacy principles, including notice and consent, transparency, user choice, data portability, data minimization, and retention.
-
Knowledge of relevant privacy and AI regulatory frameworks, including GDPR, CCPA, and the EU AI Act.
-
Ability to interpret complex software-design documents, system architectures, data flows, and product requirements.
-
Experience managing multiple reviews and competing priorities under tight deadlines.
-
Strong judgment and the ability to make well-supported recommendations in ambiguous or rapidly evolving environments.
-
Exceptional written and verbal English communication skills.
-
Ability to translate legal and compliance requirements into clear, actionable technical guidance.
-
Strong stakeholder-management and influencing skills across product, engineering, legal, and governance teams.
Nice to have
-
Familiarity with enterprise privacy-review, governance, and product-launch tools.
-
Experience supporting privacy governance for research, experimental products, or emerging technologies.
-
Experience working with cross-functional legal, ethics, privacy, product, and engineering governance bodies.
-
Experience automating privacy-review or governance workflows using AI or custom tooling.
-
A degree in Law, Computer Science, Data Governance, Information Security, or a related discipline.
-
Additional privacy, security, risk, or AI-governance certifications.
Requirements
-
English level: Advanced.
-
Work Type: Remote.
-
Working Hours: Alignment with west coast US time zone.
Benefits
-
Comprehensive health, dental, and vision coverage.
-
Life and disability insurance.
-
Retirement savings programs.
-
Paid time off and paid holidays.
-
Other wellness or voluntary benefit programs, subject to plan terms and eligibility requirements.