Privacy Program Engineer
$166k - $175k • Remote • United States, Remote • FullTime
Posted 4h ago
Job Location
United States, Remote
Tech Stack
Remote Work Policy
Fully remote
Employment Type
FullTime
Categories
Applied AI Engineer
About the job
We are seeking a Privacy Program Engineer to take ownership of the technical foundation of our privacy program. Having achieved key certifications like ISO 27001, ISO 27701, ISO 42001, and SOC 2 Type II, and actively managing GDPR and CCPA/CPRA programs, we now require an individual to manage and automate the systems that ensure ongoing compliance. This role offers significant technical depth, involving the creation of scripts, queries, and automation to manage critical workstreams such as data subject requests, data inventory and ROPA, and privacy reviews for vendors and features. You will report to the Privacy Lead and serve as the primary technical expert within the privacy team, driving the design and implementation of technical systems and tools to meet our privacy obligations.
Responsibilities
- Build the privacy automation layer using scripts, scheduled jobs, API integrations, and LLM-based agents for request routing, evidence collection, assessment intake, and control monitoring.
- Own and automate the data subject rights (DSR) program, including intake, identity verification, data store fan-out, and fulfillment tracking.
- Build and maintain a data inventory and ROPA that dynamically updates from cloud APIs, warehouse metadata, IaC, and service catalogs.
- Embed privacy into the development lifecycle by reviewing designs and PRs for data handling, advising on de-identification and encryption techniques, and providing engineers with actionable patterns.
- Engineer retention and deletion processes by translating requirements into rules, working with engineering on enforcement, and building verification mechanisms.
- Support consent management and preference handling across web properties and product surfaces.
- Address AI data challenges by tracing data flow in training, fine-tuning, inference, and logging; validating privacy claims; and building checks to maintain accuracy.
- Undertake additional privacy projects as the program evolves.
Requirements
- 4–7 years of experience in privacy, GRC, IT audit, information security, or a related field with hands-on privacy work.
- Working knowledge of GDPR and CCPA/CPRA, and familiarity with ISO 27701, ISO 27001, ISO 42001, SOC 2, and NIST.
- Hands-on experience with technical privacy operations such as data subject requests, ROPA/data inventory maintenance, privacy impact assessments, or retention enforcement.
- Demonstrated ability to automate work through AI tooling, scripts, workflow builders, or privacy/GRC platform features.
- Working proficiency in SQL and at least one scripting language for querying, API calls, schema parsing, and task automation.
- Hands-on familiarity with cloud environments (AWS, GCP, or Azure), including IAM, access scoping, logging, data stores, and data lineage.
- Strong written communication skills to translate privacy requirements for diverse audiences.