Job
Description
What You'll DoAs the Technical Lead for Technical Privacy within the Product Security organization, you will help ensure that our products are designed with robust data security and privacy controls. You will lead a team of security engineers, collaborate with cross-functional teams, and drive the implementation of privacy-by-design principles throughout the product lifecycle. Your primary responsibilities will focus on safeguarding personal data and other regulated data, ensuring compliance, and mitigating data security risks across Avalara's product ecosystem. You will be reporting to Sr. Manager, Product Security What Your Responsibilities Will Be Technical Leadership: Technical Lead for the technical privacy team focused on incorporating data privacy and security controls into product design processes. You will develop a comprehensive technical privacy strategy with a focus on data privacy. Partner with engineering, legal, compliance, and development and other product security teams to ensure privacy and security features are integrated into all stages of the product lifecycle. Create privacy-by-design principles and advocate for secure development practices across the organization. Data Privacy Governance: You will ensure products comply with relevant data privacy regulations such as GDPR, CCPA, HIPAA, and other regulatory standards. Develop product security procedures that align with legal, regulatory, and industry requirements. Guide privacy impact assessments (PIAs) and security risk assessments (SRAs) on products and services. Risk Management: Identify privacy and security risks related to product development and deployment. Implement controls and measures to mitigate data breaches, unauthorized access, and other security incidents. Lead incident response efforts related to privacy violations or data security breaches in collaboration with legal and IT teams. Collaboration and Communication: Collaborate with engineering teams to integrate security tools, practices, and automated testing into CI/CD pipelines. Work with the legal and compliance teams to interpret and respond to data privacy regulations and standards. Communicate privacy and security issues, and solutions to senior leadership and other team members. Training and Awareness: You will conduct training programs to educate product development teams on privacy and security best practices. Stay up to date with latest data privacy trends, threats, and technologies and ensure the team is aligned with industry best practices. Monitor and Reporting: Oversee monitoring of product security and privacy controls to ensure ongoing compliance and risk mitigation. Provide regular updates to leadership on the status of product security programs, privacy compliance, and risk management activities. What You'll Need To Be Successful 15 years of experience in product security, data privacy, or a related field, with experience technical leadership. Technical Skills: Understanding of data protection technologies, encryption methods, and privacy-enhancing techniques. Education: Bachelor's degree in computer science, Cybersecurity, or a related discipline (or equivalent experience).
