Privacy and Product Analyst

About the Role

Join Webflow as a Privacy and Product Analyst to shape our global privacy and product compliance, driving data protection initiatives and ensuring responsible data governance. This exciting role focuses on propelling Webflow’s mission forward while prioritizing compliance with global privacy, product, and AI regulations.

Responsibilities

• Support the development, implementation, and maintenance of Webflow’s privacy program and product counseling for AI, policies, and procedures.
• Ensure compliance with applicable federal, state, and industry privacy regulations.
• Respond to Data Subject Requests (DSRs), and improve Privacy Impact Assessments (PIAs), Incident Plan processes, and Privacy/Security controls.
• Implement and manage data privacy and AI compliance tools.
• Build data pipelines, especially for legal processes and investigative workflows.
• Conduct regular privacy and security risk assessments to identify vulnerabilities and recommend mitigation strategies.
• Develop and update privacy-related policies, guidelines, and procedures, and deliver training.
• Monitor regulatory developments and industry trends to ensure policies remain up-to-date.
• Collaborate on data-sharing agreements and relevant contracts to ensure regulatory compliance.

Requirements

• 5+ years of experience in privacy compliance, data governance, or a similar legal/compliance background.
• Bachelor's Degree or equivalent experience.
• Strong knowledge of privacy regulations and demonstrated experience conducting privacy risk assessments.
• Understanding of AI models, model training, AI use, data pipelines, data handling, and privacy-preserving techniques.
• Excellent organizational and project management skills, with the ability to manage projects across multiple teams in a fast-paced environment.
• Proficiency with Workflow Tools (e.g., JIRA, Confluence) and a willingness to learn new tools.
• Strong interpersonal and communication skills, with the ability to collaborate effectively across teams (Trust and Safety, Legal, Security, Engineering).
• Experience with Privacy-by-Design and integrating privacy principles into business processes.

Nice-to-Haves

• CIPP, CIPT, or CIPM certification.