Member of Security Staff, Privacy & Trust Ops Lead
Arena Intelligence, Inc., SF Bay Area
What you will do
Privacy operations and the commercial data path. The privacy program end-to-end: records of processing, data subject rights, retention, breach notification, and the privacy notices that face millions of users. This also covers the compliance work behind how Arena's data products are packaged and shared externally.
Compliance, risk, and third-party management. The control framework portfolio (SOC 2, ISO 27001, NIST CSF, NIST AI RMF), our continuous compliance monitoring program, and a risk register with accountable business owners. You'll also own third-party risk management end-to-end, and privacy for the API and gateway, including the sub-processor register behind our enterprise customer terms.
Model-provider compliance. Arena's relationships with frontier labs are each their own compliance surface: data processing terms, acceptable-use obligations, provider provenance and screening, and trust operations when something escalates in either direction. This barely exists as a named job anywhere else.