Seniority Level: Senior

Location: Long Beach, CA or Remote

About the role and about You:

As a Senior Data Privacy & Compliance Professional, you will assist in carrying out global Data Privacy and IT audits and other compliance assurance services to Zwift teams in multiple departments and countries.  You will manage due diligence activities, such as testing controls, process walkthroughs, third-party technology risk assessments, Data Protection Impact Assessments, contract reviews and the creation of data privacy policy and procedures.

The Zwift Compliance and Data Privacy Team works collaboratively with all Zwift departments and country offices to deliver global regulatory compliance, data privacy (GDPR/CCPA/CPRA/LGPD), vendor management/certification and business continuity.

What you’ll do:

• Establish and oversee controls promoting consistent application of appropriate practices across all areas of Zwift, such as data privacy, business, IT, and information security
• Provide necessary evidence of compliance with acknowledged mandatory Zwift standards, contract, regulatory policies, and practicesIdentify trends or foreseeable situations which place Zwift at risk of non-compliance with requirements, especially those with the potential of substantial financial, reputational or contractual operational impact  
• Provide compliance guidance, oversight, and advice to leadership and delivery entities supporting Zwift’s business objectives
• Conduct company wide audits (ISO 27001 or NIST Privacy framework)
• Assist with maintaining a data inventory, conducting privacy reviews and risk assessments for new and existing products, services and business processes and identify privacy impact mitigation strategies
• Update/Communicate compliance requirements, standards, timing and initiatives to control owners and stakeholders
• Maintain and implement Data Privacy Policy and Procedures globally and across several Zwift teams
• Promote Zwift's understanding of responsibilities and technical requirements necessary to manage Data Privacy and IT controls related to both domestic and international law
• Coach Watopians on audit and compliance standards and best practices
• Develop an in-depth understanding of industry compliance management trends and risks and collaborate with IT compliance managers to develop viable business solutions to mitigate risk
• Assist with providing direction and expertise in the following areas: Data Privacy, IT compliance, risk management and internal controls related to privacy, and information security, software architecture and development at Zwift

What we’re looking for:

• Any combination of the following Certifications: CIPP/E, CIPP/US, CISA, CIPT, CISM, CDPSE
• Experience: 5+ years in data privacy, contract review, audit and policy generation
• College Degree (or equivalent experience) in Computer Information Systems, Computer Science, MBA, or a JD/other relevant legal experience.
• Ability to work effectively with corporate executives and senior leadership
• A desire to learn and grow in the data privacy field
• Strong business awareness and an ability to identify audit issues arising from different areas in the organization
• Team player, with the ability to multitask, be flexible and work under pressure
• Socially confident with good organization, communication and presentation skills.
• Self-starter with good analytical skills and a proactive approach to problem-solving
• Excellent verbal and written skills

 Bonus points:

• Experience with Software Development / Coding (complied or scripting languages)
• Working experience with either OneTrust or TrustArc 
• Professional auditing experience