Senior Privacy Engineer

<p id="p-rc_0a6b64f2e63d2ecc-61" data-path-to-node="3"><span data-path-to-node="3,0">The Security team at Asana is responsible for protecting Asana’s employees, users, and customers</span><span data-path-to-node="3,2">. We build innovative safeguards to ensure that our data is protected against threats and that we comply with legal, regulatory, and customer requirements while collaborating closely with teams across the organization</span><span data-path-to-node="3,4">. Reporting to Asana’s Head of Global Privacy, Data Protection, and Compliance, as a founding member of the Privacy Engineering team, you will shape how we build privacy into our products from the ground up—bridging the legal, regulatory, and technical dimensions of privacy across the company</span><span data-path-to-node="3,6">.</span></p> <p id="p-rc_0a6b64f2e63d2ecc-62" data-path-to-node="4"><span data-path-to-node="4,0">This role can either be fully remote depending on which US state you live in, or based in our San Francisco office with an office-centric hybrid sche<span class="citation-2697 citation-end-2697">dule</span></span><span data-path-to-node="4,2"><span class="citation-2696 citation-end-2696">. If based in-office: The standard in-office days are Monday, Tuesday, and Thursday</span></span><span data-path-to-node="4,4"><span class="citation-2695 citation-end-2695">. Most Asanas have the option to work from home on Wednesdays</span></span><span data-path-to-node="4,6"><span class="citation-2694 citation-end-2694">. Working from home on Fridays d</span>epends on the type of work you do and the teams with which you partner</span><span data-path-to-node="4,8">. If you're interviewing for this role, your recruiter will share more about the in-office requirements</span><span data-path-to-node="4,10">.</span></p> <p data-path-to-node="5"><strong data-path-to-node="5" data-index-in-node="0">What you’ll achieve</strong></p> <ul data-path-to-node="6"> <li> <p id="p-rc_0a6b64f2e63d2ecc-63" data-path-to-node="6,0,0"><span data-path-to-node="6,0,0,0">Lead technical privacy-by-design reviews for new features and major architectural changes, embedding privacy controls early in the development lifecycle across our business, data, and product infrastructure</span><span data-path-to-node="6,0,0,2">.</span></p> </li> <li> <p id="p-rc_0a6b64f2e63d2ecc-64" data-path-to-node="6,1,0"><span data-path-to-node="6,1,0,0">Help drive compliance with global privacy regulations (such as GDPR and CCPA) by translating legal requirements into concrete engineering standards, frameworks, and tooling that facilitate velocity</span><span data-path-to-node="6,1,0,2">.</span></p> </li> <li> <p id="p-rc_0a6b64f2e63d2ecc-65" data-path-to-node="6,2,0"><span data-path-to-node="6,2,0,0">Evaluate and mitigate privacy risks in AI/ML systems, including training data pipelines and model outputs</span><span data-path-to-node="6,2,0,2">.</span></p> </li> <li> <p id="p-rc_0a6b64f2e63d2ecc-66" data-path-to-node="6,3,0"><span data-path-to-node="6,3,0,0">Build and operate systems that enable data rights for our users and privacy-enhancing technologies (PETs), such as data minimization and de-identification frameworks</span><span data-path-to-node="6,3,0,2">.</span></p> </li> <li> <p id="p-rc_0a6b64f2e63d2ecc-67" data-path-to-node="6,4,0"><span data-path-to-node="6,4,0,0">Conduct privacy impact assessments and threat modeling for high-risk data processing activities</span><span data-path-to-node="6,4,0,2">.</span></p> </li> <li> <p id="p-rc_0a6b64f2e63d2ecc-68" data-path-to-node="6,5,0"><span data-path-to-node="6,5,0,0">Advocate for privacy-preserving solutions, serve as a trusted technical advisor across the business, and identify new opportunities to improve our overall privacy posture</span><span data-path-to-node="6,5,0,2">.</span></p> </li> <li> <p id="p-rc_0a6b64f2e63d2ecc-69" data-path-to-node="6,6,0"><span data-path-to-node="6,6,0,0">Partner cross-functionally to ensure our privacy policies and notices accurately reflect our underlying technology</span><span data-path-to-node="6,6,0,2">.</span></p> </li> <li> <p id="p-rc_0a6b64f2e63d2ecc-70" data-path-to-node="6,7,0"><span data-path-to-node="6,7,0,0">Develop customer-facing trust documentation on privacy and support privacy incident response efforts</span><span data-path-to-node="6,7,0,2">.</span></p> </li> <li> <p id="p-rc_0a6b64f2e63d2ecc-71" data-path-to-node="6,8,0"><span data-path-to-node="6,8,0,0">Design and implement privacy-preserving analytics and measurement systems that provide actionable insights while protecting individual user privacy</span><span data-path-to-node="6,8,0,2">.</span></p> </li> </ul> <p data-path-to-node="7"><strong data-path-to-node="7" data-index-in-node="0">About you</strong></p> <ul data-path-to-node="8"> <li> <p id="p-rc_0a6b64f2e63d2ecc-72" data-path-to-node="8,0,0"><span data-path-to-node="8,0,0,0">Demonstrates curiosity about AI tools and emerging technologies, with a willingness to learn and leverage them to enhance productivity, collaboration, or decision-making</span><span data-path-to-node="8,0,0,2">.</span></p> </li> <li> <p id="p-rc_0a6b64f2e63d2ecc-73" data-path-to-node="8,1,0"><span data-path-to-node="8,1,0,0">6+ years of software engineering experience, with 3+ years focused on privacy or data protection</span><span data-path-to-node="8,1,0,2">.</span></p> </li> <li> <p id="p-rc_0a6b64f2e63d2ecc-74" data-path-to-node="8,2,0"><span data-path-to-node="8,2,0,0">Passion for privacy and data protection with a deep understanding of GDPR, CCPA, and emerging global privacy frameworks</span><span data-path-to-node="8,2,0,2">.</span></p> </li> <li> <p id="p-rc_0a6b64f2e63d2ecc-75" data-path-to-node="8,3,0"><span data-path-to-node="8,3,0,0">Proven experience building technical controls for data governance, including classification, lineage, retention, and deletion at scale</span><span data-path-to-node="8,3,0,2">.</span></p> </li> <li> <p id="p-rc_0a6b64f2e63d2ecc-76" data-path-to-node="8,4,0"><span data-path-to-node="8,4,0,0">Familiarity with privacy risks in ML systems, such as training data sourcing, model memorization, and inference privacy</span><span data-path-to-node="8,4,0,2">.</span></p> </li> <li> &l