Privacy Associate — AI Governance & Compliance

Handshake; San Francisco (CA); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Equity

401(k) match

Parental leave

Fertility benefits

Mental health support

Wellness stipend

Learning stipend

Remote & Office

Flexible PTO

Holidays

Team outings

Referral bonuses

Job summary

Handshake is seeking a Privacy Associate to support the day-to-day execution of our global privacy program. You'll work with the Legal team to review products, vendors, and DPIAs, maintain program records, and apply privacy requirements across Privacy tech like Ketch.

You will engage with Security, Finance, Product, and Engineering to ensure compliance, respond to inquiries, and help shape AI governance as Handshake scales.

Qualifications

• At least 2 years of privacy/compliance experience.
• Experience supporting privacy assessments, vendor reviews, or audits.
• Working knowledge of GDPR, CCPA/CPRA, and core privacy principles.
• Familiarity with DPAs, DPIAs, RoPAs, LIAs, and TIAs.
• Ability to read and summarize technical documentation with engineering.
• Strong organizational skills and attention to detail.
• Comfortable with workflow tools and spreadsheets for tracking.
• Clear written and verbal communication, with ability to explain privacy requirements.
• Good judgement for issues needing legal review.
• Interest in AI governance and privacy implications.

Responsibilities

• Vendor and subprocessor management: review DPAs, coordinate findings, maintain subprocessor records.
• Assessments and records: DPIAs, LIAs, TIAs, data inventories, retention schedules.
• Consent and tracking: administer Ketch, maintain consent experiences and jurisdiction rules.
• Individual rights: manage automated rights requests and fulfillments with engineering support.
• Customer audits and inquiries: prepare responses and gather evidence.
• Incident response support: assist with breach triage and analysis.
• Notices, policies, regulatory monitoring: draft notices and track laws affecting Handshake.
• Product/AI review support: log launches and data flow info for privacy review.
• Training and awareness: deliver privacy training and update guidance.
• Day-to-day support: monitor inbox/slack, track metrics, propose improvements.

Skills

Privacy experience

Compliance knowledge

Risk management

Legal operations

GDPR knowledge

CCPA/CPRA knowledge

Privacy assessments

DPA/DPIA familiarity

Data flow understanding

AI governance interest

Education

Tools

Ketch

OneTrust

TrustArc

Job description

Handshake is seeking a Privacy Associate to support the day-to-day execution of our global privacy program. You'll work with the Legal team to review products, vendors, and DPIAs, maintain program records, and apply privacy requirements across Privacy tech like Ketch.

You will engage with Security, Finance, Product, and Engineering to ensure compliance, respond to inquiries, and help shape AI governance as Handshake scales.