We're Looking For:
Curious, detail oriented, and proactive individuals to join Shopify's Privacy Engineering team as a Senior Technical Privacy Analyst.
In this critical role, you will be at the forefront of ensuring privacy is embedded within Shopify's products, applications, and infrastructure. You will leverage your deep understanding of privacy regulations and your technical acumen to identify, assess, and mitigate privacy risks across our entire stack. You will independently analyze technical systems, including the ability to read and interpret technical designs and system diagrams, to verify their privacy compliance and recommend necessary adjustments. Your strong communication skills will enable you to effectively explain complex privacy concepts to technical and non-technical stakeholders and collaborate on implementing robust solutions. You will also play a key role in investigating potential privacy incidents and contributing to the continuous improvement of Shopify's privacy program.
As a Senior Technical Privacy Analyst, you will:
Apply your comprehensive knowledge of privacy principles and regulations (including GDPR, CCPA, and other relevant frameworks) to Shopify's technical landscape.
Independently examine and understand Shopify's products, applications, and underlying infrastructure, including the ability to read and interpret technical designs and system diagrams to verify system operations from a privacy perspective.
Identify and assess potential privacy risks inherent in technical designs and implementations.
Develop and recommend practical and effective technical solutions and controls to mitigate identified privacy risks.
Clearly and concisely explain complex privacy requirements and technical implementations to engineering, product, data, legal, and security teams.
Collaborate effectively with cross functional teams to ensure privacy by design principles are integrated throughout the development lifecycle.
Work with others to thoroughly investigate and validate the scope of reported privacy issues, contributing to incident response and remediation efforts.
Contribute to improving technical privacy controls across Shopify's entire technology stack.
Research and evaluate new privacy enhancing technologies and their potential application within Shopify's privacy program.
Utilize data and key metrics to monitor the effectiveness of privacy controls, communicate progress, and drive improvements to Shopify's privacy program.
Qualifications:
Deep understanding of software development principles and practices, enabling you to effectively assess privacy risks within technical systems and collaborate with developers on implementing privacy-enhancing solutions.
Expertise in working with key privacy regulations, including but not limited to GDPR and CCPA, and the ability to translate legal requirements into technical specifications.
Demonstrated experience in building, implementing, and maintaining technical and organizational controls and safeguards to simplify and automate privacy practices.
Strong ability to review and create clear and concise technical documentation related to privacy controls and processes.
It would be a significant advantage if you have experience in one or more of the following (don't stress, we are not expecting experience in all of the following!):
Cloud technologies (e.g., AWS, GCP), containerized environments (e.g., Docker, Kubernetes), and infrastructure as code (IaC) practices.
Big data technologies such as Spark, DBT, and BigQuery, and understanding their privacy implications.
Solid understanding of information security fundamentals, privacy principles, and relevant compliance standards (e.g., ISO 27701).
Proven ability to build and maintain trusted and collaborative relationships with technical and non-technical stakeholders.
Experience in preparing and delivering clear and concise technical presentations to diverse audiences.