About SimpliSafe
We’re a high-tech home security company that’s passionate about protecting the life you’ve built and our mission of keeping Every Home Secure. And we’ve created a culture here that cares just as deeply about the career you’re building. Ours is a no ego culture of collaboration and innovation where those seeking their next challenge can find big opportunities and make a huge impact on the lives of all those who we protect. We don’t just want you to work here. We want you to grow and thrive here.
We’re embracing a hybrid work model that enables our teams to split their time between office and home. Hybrid for us means we expect our teams to come together in our state-of-the-art office on two core days, typically Tuesday, Wednesday, or Thursday – working together in person and choosing where they work for the remainder of the week. We all benefit from flexibility and get to use the best of both worlds to get our work done.
Why are we hiring?
Well, we’re growing and thriving. So, we need smart, talented, and humble people who share our values to join us as we disrupt the home security space and relentlessly pursue our mission of keeping Every Home Secure.
The Role
SimpliSafe is looking for a passionate, experienced privacy and information security attorney to lead our global privacy function. This role will serve as a strategic partner to the Information Security, AI Governance, Go-To-Market, Product and Engineering teams. As the company's internal privacy leader, the Head of Privacy will advise cross-functionally on data privacy, data governance, and information security — and help shape the company's future growth. This role also entails an exciting opportunity to support SimpliSafe’s investment in AI through internal adoption and implementation of corporate-wide governance.
What You'll Do
Serve as the company's internal privacy expert, providing strategic and practical counsel to teams across legal, engineering, product, marketing, security, HR, and strategic partnerships.
Lead and own the company's global data privacy compliance program end-to-end.
Serve as the company's designated Data Privacy Officer (DPO), acting as the primary point of contact for regulators, supervisory authorities, and data subjects, and advising senior leadership on privacy risk.
Act as the escalation point for negotiating, drafting, and reviewing contracts involving personal data — including vendor agreements, DPAs, data transfer agreements, and customer-facing terms.
Build and maintain privacy policies, data inventories, records of processing activities, and supporting documentation and improve process automation, templates and playbooks.
Guide the company's response to privacy inquiries and data subject rights requests in a timely and compliant manner.
Conduct Privacy Impact Assessments (PIAs/DPIAs) and guide the company through information security assessments (PCI / CCPA) to identify and mitigate risks from current and planned data processing activities.
Support regular audits and monitoring to ensure compliance with applicable privacy requirements globally.
Develop and deliver privacy training and awareness programs across the organization.
Maintain deep expertise in relevant global privacy law, including GDPR/UK GDPR, PECR/ePrivacy Directive, CCPA/CPRA and existing and emerging U.S. state laws, BIPA/CUBI, and privacy considerations in AI and IoT.
Partner with the AI Governance team to assess and mitigate privacy risk in AI-enabled product features and internal AI use cases, including within the Legal team.
Collaborate cross-functionally on incident response planning and execution and lead the legal analysis of regulatory and individual notification obligations arising from privacy and security incidents.
Partner with IT to develop and maintain a comprehensive document retention policy.
What You'll Bring
7+ years of relevant legal experience, with at least 5 years focused on data privacy and protection; in-house experience…