Risk & Compliance Partner

Dropbox; United States; Remote; USD 138,000 - 212,000; Full time

Job summary

A leading company, Dropbox, is seeking a Risk & Compliance Partner to provide expertise on privacy, risk, and compliance for the Reclaim Platform. As part of a dynamic team, you’ll handle compliance efforts including audits, and advocate for security to customers. This role requires extensive knowledge in compliance standards and the ability to collaborate across various departments.

Benefits

Competitive medical, dental, and vision coverage

401(k) plan with generous company match

Flexible PTO/Paid Time Off

Income Protection Plans

Parental benefits including leave and child care support

Qualifications

• 5+ years of experience in technology governance, risk or compliance roles.
• Deep understanding of compliance standards like SOC2 and ISO27001.
• Strong documentation skills focused on risk assessments and threat modeling.

Responsibilities

• Provide guidance on Reclaim’s security posture.
• Collaborate on compliance activities with cross-functional teams.
• Perform gap analysis and risk assessments.

Skills

Governance

Risk Management

Compliance

Privacy Standards

Documentation Skills

Job description

Join to apply for the Risk & Compliance Partner role at Dropbox

Join to apply for the Risk & Compliance Partner role at Dropbox

Get AI-powered advice on this job and more exclusive features.

Dropbox is a Virtual First company. For this role, we are hiring in Zones 2 and 3. Please refer to our Compensation section below to see what neighborhoods fall under each Zone.

Company Description

Dropbox isn’t just a workplace—it’s a living lab for more enlightened ways of working. We're a global community of bold visionaries and resourceful doers who are shaping the future of Dropbox—and with it the future of work. Our Virtual First model combines the autonomy of a distributed workplace with the power of human connection, making space for both meaningful work and meaningful relationships. With our start-up mindset and enterprise-level opportunities, you can be who you are and grow into who you’re meant to be. Here, you can own your impact to make work more intuitive, joyful, and human—for you as a Dropboxer and for hundreds of millions of people worldwide. If you're ready to push boundaries—and yourself— Dropbox is ready for you.

Team Description

The Dropbox Legal, Policy, Trust & Privacy Team safeguards our company to enable innovation while protecting our users, platform, and business. Our team navigates complex challenges at the intersection of technology and law, embracing agility to tackle the changing landscape while ensuring compliance and integrity. From governance to risk, compliance to public policy, we combine creative problem-solving with legal expertise to help our employees and users work securely, drive responsible growth, and shape the future of policy around technology. If you're excited about protecting trust in the digital age, join our Legal team. Areas of work include Governance, Risk, Compliance, Public Policy, Privacy, Intellectual Property, Commercial Contracts, Employment Law, and Regulatory Affairs.

Role Description

In this role, you will provide exceptional guidance and expertise regarding Privacy, Risk and Compliance for the Reclaim Platform (https://reclaim.ai). You will play a crucial role in developing and implementing best practices around Risk, Privacy and Compliance for Reclaim. You’ll do this by working with the broader Dropbox Privacy teams, observing compliance requirements, speaking with customers and working directly as a member of the Reclaim team. You will play a crucial role in our compliance efforts including SOC2 and similar audit projects, and advocating the overall Privacy and Security posture for Reclaim to external customers, and the rest of Dropbox.

Responsibilities

• Working with customers to answer questions and provide guidance on Reclaim’s security posture
• Working with technical engineering teams on identifying vulnerabilities, tracking remediation and establishing controls
• Provide security and privacy consulting to customers, teams and business partners
• Collaborate with Dropbox Privacy, Compliance, Legal and ITS teams to align compliance activities/standards for Reclaim with broader Dropbox standards, programs and goals
• Perform hands-on gap analysis and risk assessments to identify, document and track information security and privacy risks for the Reclaim.ai business
• Own and manage customer facing privacy and security artifacts including relevant sections of the website such as the Privacy Policy, DPA, and Reclaim’s Trust Center
• Manage inbound DSR and similar privacy requests from customers
  
  

Requirements

• 5+ yrs of experience in technology governance, risk or compliance roles in a large and/or high growth organization
• Deep understanding and hands-on experience with compliance standards such as SOC2, ISO27001, NIST and SSPA and associated controls.
• Ability to partner and navigate in a large cross functional organization working with teams in Engineering, Privacy, IT, Legal and Procurement.
• Deep understanding of privacy standards and frameworks including GDPR, DPF, CCPA and similar country and state level requirements.
• Strong documentation skills with a focus on product documentation, risk assessments, threat modeling and similar.
• Experience with vulnerability management and security incident management programs, standards and tooling
  
  

Preferred Qualifications

• Experience leading a large compliance activity and working directly with auditors
• Technical expertise with cloud-native environments and associated security controls and tools, specifically: AWS, database security, and vulnerability management
• Experience with security automation and process streamlining in the context of security risk management
• Product Management experience in a product-security context - to help define and build security related features into the Reclaim.ai platform (SSO, SCIM, audit logging, etc..)
• Interest in calendars, scheduling and time management
  
  

Compensation

US Zone 1
This role is not available in Zone 1

US Zone 2
$156,100—$211,100 USD

US Zone 3
$138,700—$187,700 USD

The range(s) listed above is the expected annual salary/OTE (On-Target Earnings) for this role, subject to change.

Please note, OTE are for sales roles only.

Salary/OTE is just one component of Dropbox’s total rewards package. All regular employees are also eligible for the corporate bonus program or a sales incentive (target included in OTE) as well as stock in the form of Restricted Stock Units (RSUs).

Dropbox takes a number of factors into account when determining individual starting pay, including job and level they are hired into, location/metropolitan area, skillset, and peer compensation. We target most new hire offers between the minimum up to the middle of the range.

Dropbox uses the zip code of an employee’s remote work location to determine which metropolitan pay range we use. Current US Zone locations are as follows:

• US Zone 1: San Francisco metro, New York City metro, or Seattle metro
• US Zone 2: Austin (TX) metro, Chicago metro, California (outside SF metro), Colorado, Connecticut (outside NYC metro), Delaware, Massachusetts, New Hampshire, New York (outside NYC metro), Oregon, Pennsylvania (outside NYC or DC metro), Washington DC metro, and West Virginia (DC metro)
• US Zone 3: All other US locations
  
  

Benefits

Dropbox is committed to investing in the holistic health and wellbeing of all Dropboxers and their families. Our benefits and perks programs include, but are not limited to:

• Competitive medical, dental, and vision coverage
• 401(k) plan with a generous company match and immediate vesting
• Flexible PTO/Paid Time Off, paid holidays, Volunteer Time Off, and more, allowing you time to unplug, unwind, and refresh
• Income Protection Plans: Life and disability insurance
• Business Travel Protection: Travel medical and accident insurance
• Perks Allowance to be used on what matters most to you, whether that’s wellness, learning and development, food and groceries, and much more
• Parental benefits including: Parental Leave, Child and Adult Care, Day Care FSA, Fertility Benefits, Adoption and Surrogacy Support, and Lactation Support
• Access to over 10,000 global co-working spaces through Gable.tomaking it easy to book flexible workspaces for collaboration or individual work
• Quarterly Cell phone and internet allowance
• Mental health and wellness benefits
• Disability and neurodivergence support benefits
  
  

Additional benefit details are available upon request.

Dropbox is an equal opportunity employer. We are a welcoming place for everyone, and we do our best to make sure all people feel supported and connected at work. A big part of that effort is our support for members and allies of internal groups like Asians at Dropbox, BlackDropboxers, enABLE, TODOS (Latinx), Pridebox (LGBTQ), Vets at Dropbox, and Women at Dropbox.

Seniority level

• Seniority level

  Not Applicable

Employment type

• Employment type

  Full-time

Job function

• Job function

  Legal

• Industries

  Software Development, IT Services and IT Consulting, and Technology, Information and Internet

Referrals increase your chances of interviewing at Dropbox by 2x

Get notified about new Compliance Specialist jobs in United States.

United States $115,200.00-$158,400.00 1 week ago

Regulatory Compliance and Contracts Administrator (Remote - US)

United States $107,360.00-$161,040.00 3 days ago

United States $100,000.00-$125,000.00 3 days ago

United States $104,000.00-$155,000.00 2 days ago

Compliance Specialist - Affordable Housing - Fully Remote

United States $110,500.00-$130,000.00 1 week ago

Jefferson County, CO $86,400.00-$162,000.00 3 days ago

United States $58,000.00-$83,750.00 3 days ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.