Privacy & Security Counsel — Hybrid, San Mateo

Roblox Corporation; San Mateo (CA); Hybrid; USD 168,000 - 212,000; Full time

Job summary

Roblox Corporation in San Mateo, CA is seeking a Privacy & Security Counsel to guide the legal aspects of security and privacy across our global platforms. Based in our San Mateo office on a hybrid schedule (Tue-Thu), you will translate complex regulations into clear, actionable guidance for legal and security teams.

You will lead incident response counsel, oversee cross-functional privacy programs, and advise product, privacy, compliance, and engineering teams on regulatory expectations

Qualifications

• 4+ years of data security, data privacy, data protection and governance experience.
• Expertise in US and global data security and protection laws and regulations.
• Knowledge of GDPR, NIS2, CRA, CCPA, COPPA, CA SB 553, NIST CSF, PCI.
• Experience with security incidents including breaches and regulator notifications.
• Training at a major national law firm; in-house experience a plus.
• Active membership in at least one US state bar; California Bar preferred.

Responsibilities

• SME on Law: provide guidance on evolving global security and privacy legal landscape.
• Incident Response Engagement: guide legal aspects during incidents from triage to regulator reporting.
• Security Compliance Support: lead cross-functional cybersecurity legal initiatives end-to-end.
• Security Team Support: embed with security teams as a trusted legal resource.
• Cross-Functional Legal Advice: support legal advocacy teams across functions.

Skills

Data privacy

Data security

Regulatory knowledge

Incident response

Cross-functional

Project management

Executive comms

Education

Juris Doctor (JD)

California Bar admission

Job description

Roblox Corporation in San Mateo, CA is seeking a Privacy & Security Counsel to guide the legal aspects of security and privacy across our global platforms. Based in our San Mateo office on a hybrid schedule (Tue-Thu), you will translate complex regulations into clear, actionable guidance for legal and security teams.

You will lead incident response counsel, oversee cross-functional privacy programs, and advise product, privacy, compliance, and engineering teams on regulatory expectations