Director Trust, Data Privacy

About the team 

At Roku, our Trust Engineering team is a close-knit group of passionate professionals.  Our mission? To protect our customers, partners, devices, services, infrastructure, and data. We work collaboratively, sharing insights and expertise to stay ahead of the curve. Join us, and you’ll be part of a dynamic team that thrives on challenges and celebrates victories together.

About the role

As part of Roku’s commitment to privacy by design, we are seeking qualified candidates for the role of Engineering Director or Manager, Data Privacy. This role will report to the Vice President of Trust but will be expected to perform the duties independently and play a vital role in ensuring that Roku’s personal data management practices adhere to regulatory obligations and industry best practices. This leader will have access to and support from Roku engineering teams to be able to effectively improve, monitor and support data privacy compliance. 

What you’ll be doing

• The Roku engineering’s ‘go-to’ technical expert for the engineering organization on matters relating to privacy engineering:   
  • Monitor and ensure compliance with regional (GDPR, ePrivacy, CCPA, CPRA, LGPD etc) privacy requirements across Roku’s engineering organizations. 
  • Manage selected consumer data store(s) and manage processes for accessing these stores.
  • Provide technical guidance to engineering teams and help define data privacy engineering requirements for new systems, products and features. 
  • Assist engineering teams to perform end-to-end quality assurance on privacy impacting projects.
  • Drive the design and implementation of information handling and monitoring processes and features for applications managing privacy related data.
  • Drive the engineering implementation of high-impact projects designed to operationalize data protection requirements, in particular cross-border data transfer commitments. 
  • Continuously improve privacy engineering practices throughout the hardware and software development lifecycle.
  • Conduct system audits, security and vulnerability analyses and other risk assessments.
  • Help develop data protection training material to educate the product engineering organizations. 
  • Provide compliance reports and participate in regular compliance meetings to discuss issues and mitigation strategies. 
• Partner closely with legal, security, compliance, product, marketing, HR, sales and other business teams on data protection-related matters. 
• Recruit and retain 'best in class technical talents' and grow the teams
• Support the Legal team in responding to data subject requests and complaints and enquiries from Data Protection Authorities and other relevant regulators. 

We’re excited if you have

• A background in information technology and cybersecurity with practical knowledge of: 
  • Cloud computing data processing environments such as AWS, GCP and Azure, 
  • Big data platforms such as Hadoop, Hive, and Superset, 
  • Privacy preserving technology such as differential privacy and pseudonymization. 
• Prior experience working with teams to deliver privacy solutions in a regulated environment such as GDPR, CCPA, or PCI-DSS.
• Passion for building security, privacy and compliance into day-to-day engineering processes across a complex organization, with a track record of success. 
• Working knowledge of data protection regulations and practices, and familiarity with information security frameworks and standards. 
• Ability to recognize the impact of product changes on data privacy by demonstrating a deep understanding of overall system architecture.
• Ability to be hands-on, and able to do design and implementation reviews.
• Understanding of the advertising technology eco-system.
• Proven track record working with Legal, Product and other functions.
• Bachelor’s Degree in Computer Science/Engineering or equivalent experience (Masters preferred)
• Preferred one or more relevant industry certifications, such as CISSP, CIPP, CISA, or equivalent. 

#LI-AM3