Privacy Associate

Handshake; San Francisco (CA); Sur place; USD 120 000 - 150 000; Plein temps

Avantages offerts par ce poste

Equity

401(k) match

Parental leave

Fertility benefits

Mental health support

Wellness stipend

Learning stipend

Remote & Office

Flexible PTO

Holidays

Team outings

Referral bonuses

Résumé du poste

Handshake is seeking a Privacy Associate to support the day-to-day execution of our global privacy program. You'll work with the Legal team to review products, vendors, and DPIAs, maintain program records, and apply privacy requirements across Privacy tech like Ketch.

You will engage with Security, Finance, Product, and Engineering to ensure compliance, respond to inquiries, and help shape AI governance as Handshake scales.

Qualifications

• At least 2 years of privacy/compliance experience.
• Experience supporting privacy assessments, vendor reviews, or audits.
• Working knowledge of GDPR, CCPA/CPRA, and core privacy principles.
• Familiarity with DPAs, DPIAs, RoPAs, LIAs, and TIAs.
• Ability to read and summarize technical documentation with engineering.
• Strong organizational skills and attention to detail.
• Comfortable with workflow tools and spreadsheets for tracking.
• Clear written and verbal communication, with ability to explain privacy requirements.
• Good judgement for issues needing legal review.
• Interest in AI governance and privacy implications.

Responsabilités

• Vendor and subprocessor management: review DPAs, coordinate findings, maintain subprocessor records.
• Assessments and records: DPIAs, LIAs, TIAs, data inventories, retention schedules.
• Consent and tracking: administer Ketch, maintain consent experiences and jurisdiction rules.
• Individual rights: manage automated rights requests and fulfillments with engineering support.
• Customer audits and inquiries: prepare responses and gather evidence.
• Incident response support: assist with breach triage and analysis.
• Notices, policies, regulatory monitoring: draft notices and track laws affecting Handshake.
• Product/AI review support: log launches and data flow info for privacy review.
• Training and awareness: deliver privacy training and update guidance.
• Day-to-day support: monitor inbox/slack, track metrics, propose improvements.

Connaissances

Privacy experience

Compliance knowledge

Risk management

Legal operations

GDPR knowledge

CCPA/CPRA knowledge

Privacy assessments

DPA/DPIA familiarity

Data flow understanding

AI governance interest

Formation

Outils

Ketch

OneTrust

TrustArc

Description du poste

About Handshake

Handshake was founded on a simple belief that everyone deserves a path to a great career, regardless of where they went to school or who they know. Today, we power 25 million job seekers, 1 million+ employers, and 1,600 educational institutions.

In 2025, we started Handshake AI and built the fastest-growing AI data business in history. We work directly with frontier AI lab researchers to create evaluations, publish benchmarks, and push the boundary of data. We’ve grown from $0 to ~$1B run rate and pay ~$60M to over 30K individuals every month.

Why join Handshake now:

• Shape how every career evolves in the AI economy, at global scale, with impact your friends, family and peers can see and feel

• Partner hand-in-hand with world-class AI labs, Fortune 500 partners and the world’s top educational institutions

• Work together with engineers, scientists, operators, and more from Palantir, Meta, Scale AI, and former YC founders

• Build a massive, fast-growing business with billions in revenue

About Handshake AI

Human data is the core infrastructure to AI advancement. Frontier AI labs currently improve model capabilities with various data-intensive post-training techniques. We believe that data spend for AI training will increase by 3-5x in the next few years and continue for much longer as models take on new domains. Handshake AI supports all of the frontier AI labs, working on their most complex data at the largest scale.

About The Role

Handshake is seeking a Privacy Associate to support the day-to-day execution of our global privacy program. As part of Handshake's Legal team, you will report to the Senior Director & Counsel, Compliance, and work closely with Security, Finance, Product, and Engineering to review new products and vendors, respond to inquiries, maintain program records, and put privacy requirements into practice.

This is a hands-on opportunity to build experience across a broad range of privacy activities, including AI governance, while taking ownership of recurring workflows. We're looking for someone organized and practical, with strong follow-through and the judgment to recognize when an issue needs legal review.

What you'll do

• Vendor and subprocessor management. Assess vendors' data handling practices, review DPAs, coordinate with cross-functional partners on findings, and elevate exceptions. Maintain subprocessor records and disclosures, coordinate required notices, and track diligence requirements.

• Assessments and records. Support the preparation and review of DPIAs, LIAs, and TIAs, gathering information from business owners, documenting findings, and tracking mitigation actions with guidance from the Privacy Program Manager. Keep RoPAs, data inventories, and retention schedules current as products and systems change, and coordinate retention and deletion with business owners.

• Consent and tracking technologies. Own day-to-day administration of Ketch, our privacy rights and consent platform.Maintain consent experiences, purposes, and jurisdiction-specific rules, including honoring Global Privacy Control and other universal opt-out signals. Run regular consent testing and cookie and tag scans, and work with Marketing and Engineering to categorise tracking technologies, resolve compliance issues, and deploy configuration changes.

• Individual rights. Working with Ketch, keep our automated rights request process accurate and reliable. Monitor workflows and deadlines, handle exceptions that automation can’t resolve, spot-check fulfillment across connected systems, and partner with Engineering to resolve integration issues. Track request volume and turnaround times, and recommend workflow improvements.

• Customer audits and inquiries. Prepare responses to customer questionnaires and audits, coordinate evidence collection, and help Sales and Customer Success answer privacy questions. Maintain accurate, approved response materials.

• Incident response support. Assist with breach triage, notification analysis, and post-incident documentation alongside Security.

• Notices, policies, and regulatory monitoring. Draft and update privacy notices and the public privacy policy as products, practices, and laws change. Track new and amended privacy and AI laws, and summarise what changed and what it means for Handshake.

• Product and AI review support. Support the privacy team’s review of new features and AI-enabled functionality by logging launch intake, gathering data flow information, and tracking follow-up items, escalating questions to counsel and the Privacy Program Manager.

• Training and awareness. Help deliver privacy training and keep internal guidance current, with a focus on the teams that handle student and customer data most often.

• Day-to-day support and program operations. Monitor the privacy inbox and internal Slack channels, respond to routine questions, and elevate complex or sensitive matters promptly. Track assessments, requests, and follow-up actions, prepare metrics and status updates, and recommend improvements to recurring processes.

What You'll Bring

• At least 2 years of experience supporting privacy, compliance, risk management, or relevant legal operations.

• Experience conducting, reviewing, or supporting privacy assessments, vendor reviews, individual rights requests or compliance audits.

• Working knowledge of GDPR, CCPA/CPRA, other US state privacy laws and core privacy principles.

• Familiarity with the assessments and records this role touches daily: DPAs, DPIAs, RoPAs, LIAs, and TIAs.

• Ability to read and summarise technical documentation (data flows, architecture diagrams) with help from Engineering.

• Strong organisational skills and attention to detail, including the ability to manage competing requests and meet deadlines.

• Comfortable with workflow tools (e.g., Linear and Notion) and spreadsheets for tracking.

• Clear written and verbal communication skills, with the ability to explain privacy requirements to colleagues across the business.

• Sound judgement in identifying issues that require further assessment or legal review.

• Interest in how AI and automated decision-making intersect with privacy, and a willingness to learn this fast-moving area.

Bonus Points

• Experience with privacy in a consumer-facing, student, or employment context.

• Experience supporting a privacy program at a technology company or global organisation.

• Hands-on experience configuring or operating a privacy or consent management platform such as Ketch, OneTrust, or TrustArc.

• Hands-on experience with AI governance, algorithmic impact assessments, or automated decision-making rules.

• Experience with cookie and tracking technology compliance, including consent management and opt-out signals.

• Experience with incident response or breach notification analysis.

• Experience responding to customer questionnaires or supporting procurement and vendor diligence.

• A privacy certification such as CIPP, CIPM, CIPT, or AIGP.

We Offer

Handshake delivers benefits that help you feel supported and thrive at work and in life.

The below benefits are for full-time US employees.

• Ownership: Equity in a fast-growing company
• Financial Wellness: 401(k) match, competitive compensation, financial coaching
• Family Support: Paid parental leave, fertility benefits, parental coaching
• Wellbeing: Medical, dental, and vision, mental health support, $500 wellness stipend
• Growth: $2,000 learning stipend, ongoing development
• Remote & Office: Internet, commuting, and free lunch/gym in our SF office
• Time Off: Flexible PTO, 15 holidays + 2 flex days
• Connection: Team outings & referral bonuses

Explore our mission, values, and comprehensive US benefits at joinhandshake.com/careers.