Arena

Member of Security Staff, Privacy & Trust Ops Lead

SF Bay Area. Posted 2 months ago

The role

You will own privacy, compliance, and trust operations by building programs from the ground up. You will partner with Engineering on privacy initiatives and work with the Legal Team to implement operational programs.

What you will do

  • Manage privacy operations including records of processing, data subject rights, retention, and breach notification.
  • Handle compliance, risk, and third-party management including SOC 2, ISO 27001, NIST CSF, and NIST AI RMF.
  • Own third-party risk management end-to-end.
  • Manage model-provider compliance including data processing terms and acceptable-use obligations.
  • Oversee trust and safety governance, mandated reporting, and evidence preservation.
  • Drive privacy and trust engineering initiatives with Engineering.
  • Act as a gate on vendor and provider onboarding.
  • Serve as a named escalation path to the Executive Team.
  • Provide sign-off on compliance representations.

Required qualifications

  • Track record of building a privacy or compliance program where it did not exist.
  • Technical fluency to work with engineers on privacy and trust systems, reading schemas and reasoning about data flows.
  • Depth in GDPR and US state privacy regimes.
  • Ability to run a DPIA and reason about controller/processor boundaries.
  • Audit experience from the inside, specifically SOC 2 and ideally ISO 27001.
  • Experience owning an external party relationship with contractual obligations.
  • Experience on the commercial side of privacy.
  • Experience owning an obligation with a real clock, such as mandated reporting or breach notification.
  • Judgment about what is actually risky.
  • Comfort reasoning from principles on questions without settled regulatory answers.

Nice to have

  • Experience working with or inside AI labs, model providers, or platforms with similar provider relationships
  • NIST AI RMF, ISO 42001, or comparable AI governance work
  • Trust and safety experience, especially mandated reporting regimes or platform integrity at consumer scale
  • Privacy engineering background

Benefits

  • Competitive compensation aligned to the markets where team members are based
  • Medical benefits
  • Dental benefits
  • Vision benefits
  • Additional support programs

About the company

Arena is a platform for evaluating how AI models perform in the real world. Founded by researchers from UC Berkeley's SkyLab, the team includes members from Google, Stanford, and DeepMind.