Senior Privacy Analyst

Zwift’s Compliance Team is looking for a Senior Privacy Analyst to drive strategic initiatives across Zwift’s various product, engineering, and support organizations. In this role, you will help the Legal and Compliance team ensure compliance with global privacy regulations and support the management of privacy risks across Zwift. Reporting to the Sr. Compliance & Risk Manager, you will be a key leader for Zwift’s future success as an advocate and agent for users’ privacy, trust, and safety. You will manage due diligence activities, such as testing controls, process walkthroughs, third-party technology risk assessments, DPIA’s, contract reviews and the creation of data privacy policy and procedures. Your rockstar communication and stakeholder management skills, and confidence working on problems with incomplete information, will amplify your impact on user privacy across all of our products and services. 

 What you’ll do: 

• Collaborate with and influence cross-functional stakeholders (e.g., Legal, Product, Engineering, Marketing, Information Security, and Data teams) to successfully implement the Privacy strategy and roadmap across Zwift
• Assist with maintaining a data inventory, conducting privacy reviews and risk assessments for new and existing products, services and business processes and identify privacy impact mitigation strategies
• Maintain and implement Data Privacy Policy and Procedures globally and across several Zwift teams
• Enhance, operationalize and lead key privacy initiatives and capabilities, including tracking and reporting on privacy metrics, developing internal documentation and guidance, and monitoring the operational effectiveness of privacy controls.
• Support the Compliance team in developing and executing a prioritized Privacy roadmap
• Identify automation opportunities across the enterprise to scope, prioritize, and plan their implementation
• Design and conduct role-specific data privacy training for engineering and product managers.
• Coach Watopians on audit and compliance standards and best practices
• Manage aspects of the data deletion and data access capabilities and support the incorporation of privacy-by-design and the privacy review process.

 What we’re looking for: 

• 5+ years direct experience driving projects and initiatives in data privacy, data protection, compliance, and audit  technology. Preferred prior experience at medium or large companies.
• Bachelor's degree
• Self-motivation to deliver results and seek continuous improvement
• High attention to detail, including proven ability to document requirements and to balance multiple, competing priorities
• Team player, with the ability to multitask, flexible and can work under pressure
• Strong business awareness and an ability to identify audit issues arising from different areas in the organization
• Socially confident with good organization, communication and presentation skills
• Any combination of the following Certifications: CDPSE, CIPP/E, CIPP/US, CIPT, CIPM, CISA, CISM

 Bonus points: 

• Advanced degree
• Experience in program management focused on the Legal, Compliance, Security & Privacy domains
• Experience using data analytics tools, e.g. Optimizely, Google Analytics, and Amplitude
• Experience using data privacy tools and platforms, e.g. OneTrust, TrustArc, BreachRx
• Experience with quality for consumer electronics, fitness, and/or mobile games
• Professional auditing experience