← All roles

Privacy Associate

Handshake· General & Administrative
Apply on company site
San Francisco, CA$120k - $149kFull-timePosted 4d ago

About the role

Privacy Associate to support the day-to-day execution of Handshake's global privacy program within the Legal team, focusing on vendor management, assessments, consent technologies, individual rights, audits, incident response support, notices and regulatory monitoring, product reviews, training, and day-to-day program operations.

Responsibilities

  • Vendor and subprocessor management. Assess vendors' data handling practices, review DPAs, coordinate with cross-functional partners on findings, escalate exceptions. Maintain subprocessor records and disclosures, coordinate required notices, and track diligence requirements.
  • Assessments and records. Support the preparation and review of DPIAs, LIAs, and TIAs, gathering information from business owners, documenting findings, and tracking mitigation actions with guidance from the Privacy Program Manager. Keep RoPAs, data inventories, and retention schedules current as products and systems change, and coordinate retention and deletion with business owners.
  • Consent and tracking technologies. Own day-to-day administration of Ketch, our privacy rights and consent platform. Maintain consent experiences, purposes, and jurisdiction-specific rules, including honoring Global Privacy Control and other universal opt-out signals. Run regular consent testing and cookie and tag scans, and work with Marketing and Engineering to categorize tracking technologies, resolve compliance issues, and deploy configuration changes.
  • Individual rights. Working with Ketch, keep automated rights request process accurate and reliable. Monitor workflows and deadlines, handle exceptions that automation can’t resolve, spot-check fulfillment across connected systems, and partner with Engineering to resolve integration issues. Track request volume and turnaround times, and recommend workflow improvements.
  • Customer audits and inquiries. Prepare responses to customer questionnaires and audits, coordinate evidence collection, and help Sales and Customer Success answer privacy questions. Maintain accurate, approved response materials.
  • Incident response support. Assist with breach triage, notification analysis, and post-incident documentation alongside Security.
  • Notices, policies, and regulatory monitoring. Draft and update privacy notices and the public privacy policy as products, practices, and laws change. Track new and amended privacy and AI laws, and summarize what changed and what it means for Handshake.
  • Product and AI review support. Support the privacy team’s review of new features and AI-enabled functionality by logging launch intake, gathering data flow information, and tracking follow-up items, escalating questions to counsel and the Privacy Program Manager.
  • Training and awareness. Help deliver privacy training and keep internal guidance current, with a focus on the teams that handle student and customer data most often.
  • Day-to-day support and program operations. Monitor the privacy inbox and internal Slack channels, respond to routine questions, and escalate complex or sensitive matters promptly. Track assessments, requests, and follow-up actions, prepare metrics and status updates, and recommend improvements to recurring processes.

Qualifications

  • At least 2 years of experience supporting privacy, compliance, risk management, or related legal operations.
  • Experience conducting, reviewing, or supporting privacy assessments, vendor reviews, individual rights requests, or compliance audits.
  • Working knowledge of GDPR, CCPA/CPRA, other US state privacy laws, and core privacy principles.
  • Familiarity with DPAs, DPIAs, RoPAs, LIAs, and TIAs.
  • Ability to read and summarize technical documentation (data flows, architecture diagrams) with help from Engineering.
  • Strong organizational skills and attention to detail, including the ability to manage competing requests and meet deadlines.
  • Comfortable with workflow tools (e.g., Linear and Notion) and spreadsheets for tracking.
  • Clear written and verbal communication skills, with the ability to explain privacy requirements to colleagues across the business.
  • Sound judgment in identifying issues that require further assessment or legal review.
  • Interest in how AI and automated decision-making intersect with privacy, and a willingness to learn this fast-moving area.

Skills

Required:Privacy program operationsRegulatory knowledgeTechnical documentation comprehensionCommunication

Benefits

  • Equity in a fast-growing company
  • 401(k) match, competitive compensation, financial coaching
  • Paid parental leave, fertility benefits, parental coaching
  • Medical, dental, and vision, mental health support, $500 wellness stipend
  • $2,000 learning stipend, ongoing development
  • Internet, commuting, and free lunch/gym in our SF office
  • Flexible PTO, 15 holidays + 2 flex days
  • Team outings & referral bonuses
Last updated Oct 22, 2026. Interested? Apply on the company site.
Handshake logo

About Handshake

Careers start here

The better career platform for Gen Z changing how, where, and why the next generation of talent builds their career.

educationcareer platformtalent acquisitionstudent engagement
Company profileWebsite

More open roles at Handshake