Privacy Analyst- HQ

Agora; Santa Clara (CA); On-site; USD 120,000 - 150,000; Full time

Job summary

Agora, based in Santa Clara, CA, is seeking a Privacy Analyst to enhance its global privacy and AI governance initiatives. The role demands collaboration with various departments to integrate privacy principles into products.

The ideal candidate will have over 5 years of experience in privacy, compliance, or legal operations within a tech setting, with strong knowledge of GDPR and CCPA, alongside the ability to articulate technical data concepts effectively.

Qualifications

• 5+ years of experience in privacy, compliance, legal operations, or risk management within a SaaS, cloud, or technology company.
• Ability to be in the office 3x per week.

Responsibilities

• Conduct Privacy Reviews, Data Protection Impact Assessments (DPIAs), and Transfer Impact Assessments (TIAs).
• Manage customer privacy requests and own the Data Subject Request (DSR) process.

Skills

GDPR knowledge

Data Protection Impact Assessments (DPIAs)

Privacy Compliance

Technical understanding of data flows

Education

Bachelor's degree or equivalent experience

Tools

Ketch

OneTrust

Job description

Agora is the global leader in real-time engagement, providing developers with simple, flexible, and powerful APIs to embed real‑time conversational AI, voice, video, interactive live streaming, and chat into their applications and IoT devices. Headquartered in Santa Clara, CA, Agora is trusted by over 5,800 leading organizations across the globe to power best‑in‑class real‑time experiences from social media and live shopping to education and telehealth.

Privacy Analyst

We're looking for a hands‑on Privacy Analyst to help scale Agora's global privacy and AI governance programs. You'll partner with Legal, Engineering, Product, Security, Sales, and Customer Success to embed privacy by design into our products while supporting customer, regulatory, and internal compliance initiatives.

This role combines privacy operations, customer‑facing support, AI governance, and program management in a fast‑paced technology environment.

What You'll Do

Privacy Reviews & Compliance

• Conduct Privacy Reviews, Data Protection Impact Assessments (DPIAs), and Transfer Impact Assessments (TIAs) for new products, features, internal tools, and AI services.
• Evaluate data flows across SDKs, cloud infrastructure, and real‑time communications systems, including cross‑border data transfers, encryption, and regional processing requirements.

Customer & Regulatory Support

• Manage customer privacy requests, including DPA negotiations, GDPR inquiries, sub‑processor reviews, and security/privacy questionnaires.
• Own the end‑to‑end Data Subject Request (DSR) process, ensuring timely and compliant responses.
• Support privacy reviews for regulated industries, including HIPAA and COPPA.

Privacy Operations

• Maintain Agora's Record of Processing Activities (RoPA), privacy notices, DPA templates, SCCs, and sub‑processor documentation.
• Support privacy audits and certifications, including SOC 2 Type II, HIPAA, ISO 27001/27701, ISO/IEC 42001, and regional privacy programs.

AI Governance

• Perform AI compliance reviews covering training data governance, consent mechanisms, model transparency, and regulatory requirements.
• Partner with Security and AI Governance teams to evaluate internal AI tools and third‑party AI vendors.

Program Enablement

• Monitor evolving global privacy and AI regulations, including GDPR, CCPA/CPRA, LGPD, PIPL, COPPA, the EU AI Act, and emerging U.S. AI regulations.
• Develop guidance, training, playbooks, and repeatable processes that improve privacy compliance across the organization.
• Track privacy metrics, DSR SLAs, review throughput, and program performance for executive reporting.

Qualifications

Required

• Bachelor's degree or equivalent experience.
• 5+ years of experience in privacy, compliance, legal operations, or risk management within a SaaS, cloud, or technology company.
• Strong knowledge of GDPR, CCPA/CPRA, LGPD, and modern privacy operations.
• Hands‑on experience with DPIAs, RoPA, DSRs, DPAs, and vendor privacy assessments.
• Ability to understand technical concepts such as data flows, cloud architecture, SDKs, and encryption while effectively partnering with both engineering and legal teams.
• Ability to be in the office 3x per week.

Preferred

• IAPP certification (CIPP/E, CIPP/US, CIPM, CIPT, or AIGP).
• Experience supporting SOC 2 Type II, ISO 27001/27701, ISO/IEC 42001, HIPAA, or similar compliance frameworks.
• Experience with AI governance, AI/ML compliance, and emerging AI regulations.
• Hands‑on experience administering Ketch (preferred) or comparable platforms such as OneTrust, Securiti, or TrustArc.
• Experience supporting global engineering organizations and distributed teams.
• Experience with privacy considerations for real‑time communications, video, telephony, or media streaming technologies.

Work Authorization

Applicants must be legally authorized to work in the United States at the time of hire. This position is not eligible for current or future employment visa sponsorship.