Director of Privacy & Data Compliance

AppFolio; San Diego (CA); Vor Ort; USD 167.000 - 209.000; Vollzeit

Zusammenfassung

AppFolio is seeking a senior privacy leader to own and advance our Privacy Program across product, engineering, and operations. You will drive enterprise data privacy policy, rights requests, risk assessments, and records retention.

You will partner with Legal, InfoSec, and business leaders to embed data governance and privacy standards into the fabric of the company, while reporting on KPI/KRIs to executives and the board.

Qualifikationen

• 10+ years in compliance, risk, or operational leadership in high-growth tech/saaS/regulated environments.
• Experience building privacy frameworks (e.g., CCPA/CPRA) within SaaS product architectures.
• Proven ability to define KPIs/KRIs and standardized program reporting structures from scratch.
• Experience serving as a primary subject matter expert and Second Line liaison to ERM and Internal Audit.

Aufgaben

• Lead AppFolio’s Privacy Program, including policy development, rights requests, risk assessments, and records retention.
• Privacy SME for the third-party risk management program in partnership with TPRM.
• Conduct maturity and operating effectiveness assessments to identify gaps and chart a roadmap for evolution.
• Map privacy obligations to product/workflows and integrate data privacy, retention, and access standards into product and operations.
• Act as the Second Line liaison to ERM and Internal Audit, providing consistent compliance reporting inputs.

Kenntnisse

Privacy program leadership

Privacy risk management

Compliance reporting

ERM liaison

Cross-functional leadership

Ausbildung

Bachelor’s degree

Jobbeschreibung

AppFolio is seeking a senior privacy leader to own and advance our Privacy Program across product, engineering, and operations. You will drive enterprise data privacy policy, rights requests, risk assessments, and records retention.

You will partner with Legal, InfoSec, and business leaders to embed data governance and privacy standards into the fabric of the company, while reporting on KPI/KRIs to executives and the board.