Arena
Member of Security Staff, Privacy & Trust Ops Lead
SF Bay Area · On-site · Staff · Full-time · Posted Sep 4, 2026
About the job
Build and lead Arena’s privacy, compliance, risk, and trust operations, partnering with engineering, legal, and leadership to turn requirements into operational controls and product practices.
What you'll do
- Own privacy operations, including data subject rights, retention, breach notification, privacy notices, and compliance for externally shared data products.
- Manage compliance frameworks, continuous monitoring, risk registers, and third-party and model-provider obligations.
- Oversee trust and safety governance, including mandated reporting, evidence preservation, moderation oversight, and enforcement policy.
What they ask for
- Track record building a privacy or compliance program from the ground up.
- Technical fluency to work with engineers on data flows and privacy controls.
- Deep knowledge of GDPR and US state privacy regimes, including ability to run a DPIA and assess controller/processor boundaries.
- Hands-on audit experience with SOC 2; experience owning external contractual obligations, commercial privacy, and a time-bound obligation such as mandated reporting, breach notification, or regulatory disclosure.
Nice to have
- Experience with AI labs, model providers, or similar platforms; NIST AI RMF, ISO 42001, or comparable AI governance experience.
- Trust and safety experience or a privacy engineering background.
Tools
SOC 2, ISO 27001, NIST CSF, NIST AI RMF, ISO 42001
AI focus
The role governs privacy, compliance, and trust operations for an AI evaluation platform, including model-provider relationships and AI governance.
Model-written summary · the original posting is authoritative