Senior Privacy Engineer

<p id="p-rc_0a6b64f2e63d2ecc-61" data-path-to-node="3">Our Legal team at Asana works collaboratively across functions to achieve our ambitious mission of fostering effortless teamwork for everyone. We are a tightly-knit and cooperative group committed to supporting teams throughout the organization, ensuring they have the necessary resources for success while protecting Asana's core values and interests. Within our team, we exchange ideas, collectively solve problems, and collaborate with other groups to navigate through challenging issues. This role reports to Asana’s Head of Global Privacy, Data Protection, and Compliance. As a founding member of the Privacy Engineering team, you'll shape how we build privacy into our products from the ground up — bridging the legal, regulatory, and technical dimensions of privacy across the company. </p> <p id="p-rc_0a6b64f2e63d2ecc-62" data-path-to-node="4"><span data-path-to-node="4,0">This role can either be fully remote depending on which US state you live in, or based in our San Francisco office with an office-centric hybrid sche<span class="citation-2697 citation-end-2697">dule</span></span><span data-path-to-node="4,2"><span class="citation-2696 citation-end-2696">. If based in-office: The standard in-office days are Monday, Tuesday, and Thursday</span></span><span data-path-to-node="4,4"><span class="citation-2695 citation-end-2695">. Most Asanas have the option to work from home on Wednesdays</span></span><span data-path-to-node="4,6"><span class="citation-2694 citation-end-2694">. Working from home on Fridays d</span>epends on the type of work you do and the teams with which you partner</span><span data-path-to-node="4,8">. If you're interviewing for this role, your recruiter will share more about the in-office requirements</span><span data-path-to-node="4,10">.</span></p> <p data-path-to-node="5"><strong data-path-to-node="5" data-index-in-node="0">What you’ll achieve</strong></p> <ul data-path-to-node="6"> <li> <p id="p-rc_0a6b64f2e63d2ecc-63" data-path-to-node="6,0,0"><span data-path-to-node="6,0,0,0">Lead technical privacy-by-design reviews for new features and major architectural changes, embedding privacy controls early in the development lifecycle across our business, data, and product infrastructure</span><span data-path-to-node="6,0,0,2">.</span></p> </li> <li> <p id="p-rc_0a6b64f2e63d2ecc-64" data-path-to-node="6,1,0"><span data-path-to-node="6,1,0,0">Help drive compliance with global privacy regulations (such as GDPR and CCPA) by translating legal requirements into concrete engineering standards, frameworks, and tooling that facilitate velocity</span><span data-path-to-node="6,1,0,2">.</span></p> </li> <li> <p id="p-rc_0a6b64f2e63d2ecc-65" data-path-to-node="6,2,0"><span data-path-to-node="6,2,0,0">Evaluate and mitigate privacy risks in AI/ML systems, including training data pipelines and model outputs</span><span data-path-to-node="6,2,0,2">.</span></p> </li> <li> <p id="p-rc_0a6b64f2e63d2ecc-66" data-path-to-node="6,3,0"><span data-path-to-node="6,3,0,0">Build and operate systems that enable data rights for our users and privacy-enhancing technologies (PETs), such as data minimization and de-identification frameworks</span><span data-path-to-node="6,3,0,2">.</span></p> </li> <li> <p id="p-rc_0a6b64f2e63d2ecc-67" data-path-to-node="6,4,0"><span data-path-to-node="6,4,0,0">Conduct privacy impact assessments and threat modeling for high-risk data processing activities</span><span data-path-to-node="6,4,0,2">.</span></p> </li> <li> <p id="p-rc_0a6b64f2