Senior Privacy & Data Compliance Leader

AppFolio Inc; Goleta (CA); On-site; USD 167,000 - 209,000; Full time

Job summary

AppFolio in Goleta seeks a Compliance Director to mature its Privacy Compliance Program, oversee records retention, and strengthen second-line data governance across Legal, InfoSec, and Product teams. This hands-on leader will define KPIs, KRIs, and a robust reporting foundation.

You will partner with ERM and Internal Audit, translate compliance data into actionable guidance for executives, and drive practical risk decisions while embedding privacy into business workflows and product operations.

Qualifications

• 10+ years of progressive compliance, risk, or operational leadership experience in high-growth technology, SaaS, fintech, or regulated environments.
• Demonstrated experience defining compliance metrics, KPIs/KRIs, and standardized program reporting structures from scratch in a growing organization.
• Proven, hands-on experience building and operationalizing comprehensive privacy frameworks (e.g., CCPA/CPRA) and records retention programs within SaaS product architectures and operational workflows, ideally in a business that acts as both controller and service provider/processor.
• Experience building or operating privacy or data governance programs (e.g., CCPA/CPRA, records retention, data classification, data ownership, second-line monitoring) in a technology or regulated environment.
• Proven track record as a hands-on individual contributor driving end-to-end execution of enterprise program management, governance reporting, and cross-functional tracking.
• Experience serving as a primary subject matter expert and Second Line liaison to ERM and Internal Audit functions.

Responsibilities

• Lead AppFolio’s Privacy Program, including the Enterprise Data Privacy Policy, individual rights requests, privacy risk assessments, and records retention.
• Privacy SME for the third‑party risk management program (TPRM), in partnership with the TPRM program.
• Conduct a comprehensive initial maturity and operating effectiveness assessment of AppFolio’s existing privacy program to identify gaps, establish baseline risk profiles, and chart a roadmap for program evolution.
• Map privacy obligations to real-world business and product workflows, cleanly integrating data privacy, classification, retention, and access standards into Product, Engineering, and operational teams without creating unnecessary friction.
• Direct AppFolio’s compliance oversight of data governance as an enterprise discipline, standing up the compliance framework, policies, and standards where they do not yet exist. Partner with Legal, InfoSec, and Business leaders to integrate data compliance and privacy standards into first-line operations. Serve as the compliance lead for privacy and data governance dimensions of AI, automated tools, and emerging technology across company products and internal operations.
• Establish a standardized framework to measure and report on compliance program health, defining key performance indicators (KPIs) and key risk indicators (KRIs) across core compliance domains.
• Partner with cross-functional teams to identify key compliance data sources and establish consistent, repeatable reporting processes.
• Synthesize compliance metrics into actionable reporting outputs, ranging from operational team updates to executive leadership and board committee decks.
• Establish clear operational thresholds and accountability, ensuring that risk trends or identified compliance gaps lead to practical action, designated ownership, and tracked resolution.
• Act as the primary Second Line liaison to Enterprise Risk Management (“ERM”) and Internal Audit, providing consistent compliance reporting inputs to support enterprise risk assessments and independent assurance.
• Serve as the accountable lead for the Privacy and Data Compliance programs and the second‑line reporting framework, and coordinate the Compliance team members who support them.

Skills

Operational leadership

Hands-on contributor

Cross-functional collaboration

Transparency in reporting

Standardized metrics

Executive briefing

Education

Bachelor’s degree

CIPP/US or CCEP (preferred)

Job description

AppFolio in Goleta seeks a Compliance Director to mature its Privacy Compliance Program, oversee records retention, and strengthen second-line data governance across Legal, InfoSec, and Product teams. This hands-on leader will define KPIs, KRIs, and a robust reporting foundation.

You will partner with ERM and Internal Audit, translate compliance data into actionable guidance for executives, and drive practical risk decisions while embedding privacy into business workflows and product operations.