Privacy Analyst
Role Description
Protecting Dropbox and our users is critical to being worthy of trust. We’re looking for a Privacy Analyst to join our close-knit team. In this role, you’ll partner closely with fellow Dropboxers in Engineering and Product, Product Counseling, and Risk & Compliance in running a dynamic and constantly evolving privacy program. You’ll help our team build up privacy by design processes, identify and address gap areas, and lead risk assessments such as Data Protection Impact Assessments (DPIAs). This is a unique opportunity that will allow you to interact with a diverse and multi-disciplinary cross-section of our company while building upon Dropbox’s legacy of thoughtful and privacy-conscious innovation.
Please note, Dropbox is currently only authorized to hire candidates from the following provinces: Alberta, British Columbia, Ontario, and Saskatchewan. Responsibilities The Privacy Analyst role supports the operation of key components of the Dropbox Privacy Program. Core responsibilities include:- Supporting privacy compliance and regulatory processes, including: Developing an expertise in Dropbox products and, and identifying areas for improvement; Conducting vendor and partner privacy due diligence; Documenting Data Protection Impact Assessments and remediating identified gaps; Increasing privacy awareness for both our global workforce and specific roles; Helping to obtain privacy certifications, such as Codes of Conduct and the EU-US Data Privacy Framework.
- Partnering with Engineering, Product, Marketing and Sales, as well as across Legal, to weave privacy into all of Dropbox’s workstreams.
- Leading continuous cross-functional efforts to ensure Dropbox maintains industry-leading practices in protecting customer, employee and candidate personal data.
- 1+ years of overall experience at a technology company or similar organization.
- 1+ years of experience directly working in privacy projects or engagements.
- Basic knowledge of global privacy regulations, standards, and frameworks.
- Experience operating privacy processes such as reviewing vendor and partners for privacy concerns, and conducting Data Protection Impact Assessments or other privacy risk assessments.
- Team player with strong attention to detail, and ability to meet tight deadlines amid shifting priorities.
- Genuine interest in learning about technology and a desire to tackle problems with creative solutions.
- Great interpersonal skills and a track record of effectively communicating with teammates, product managers, engineers and legal counsel in a fast-paced environment.
- Ability to own and deliver projects end-to-end, and create urgency toward completion.
- Technical competence and comfort with technical terms, as well as a willingness and ability to dive into technical and process details.
- Comfort and ability to work globally, remotely and cross-functionally, with a broad audience of stakeholders.