Privacy Analyst

We're looking for a hands-on Privacy Analyst to help scale Agora's global privacy and AI governance programs. You'll partner with Legal, Engineering, Product, Security, Sales, and Customer Success to embed privacy by design into our products while supporting customer, regulatory, and internal compliance initiatives.

This role combines privacy operations, customer-facing support, AI governance, and program management in a fast-paced technology environment.

What You'll Do

Privacy Reviews & Compliance

• Conduct Privacy Reviews, Data Protection Impact Assessments (DPIAs), and Transfer Impact Assessments (TIAs) for new products, features, internal tools, and AI services.
• Evaluate data flows across SDKs, cloud infrastructure, and real-time communications systems, including cross-border data transfers, encryption, and regional processing requirements.

Customer & Regulatory Support

• Manage customer privacy requests, including DPA negotiations, GDPR inquiries, sub-processor reviews, and security/privacy questionnaires.
• Own the end-to-end Data Subject Request (DSR) process, ensuring timely and compliant responses.
• Support privacy reviews for regulated industries, including HIPAA and COPPA.

Privacy Operations

• Maintain Agora's Record of Processing Activities (RoPA), privacy notices, DPA templates, SCCs, and sub-processor documentation.
• Administer and optimize our privacy platform (Ketch), including consent management, cookie compliance, data mapping, DSR workflows, and assessment automation.
• Support privacy audits and certifications, including SOC 2 Type II, HIPAA, ISO 27001/27701, ISO/IEC 42001, and regional privacy programs.

AI Governance

• Perform AI compliance reviews covering training data governance, consent mechanisms, model transparency, and regulatory requirements.
• Partner with Security and AI Governance teams to evaluate internal AI tools and third-party AI vendors.

Program Enablement

• Monitor evolving global privacy and AI regulations, including GDPR, CCPA/CPRA, LGPD, PIPL, COPPA, the EU AI Act, and emerging U.S. AI regulations.
• Develop guidance, training, playbooks, and repeatable processes that improve privacy compliance across the organization.
• Track privacy metrics, DSR SLAs, review throughput, and program performance for executive reporting.

Qualifications

Required

• Bachelor's degree or equivalent experience.
• 5+ years of experience in privacy, compliance, legal operations, or risk management within a SaaS, cloud, or technology company.
• Strong knowledge of GDPR, CCPA/CPRA, LGPD, and modern privacy operations.
• Hands-on experience with DPIAs, RoPA, DSRs, DPAs, and vendor privacy assessments.
• Ability to understand technical concepts such as data flows, cloud architecture, SDKs, and encryption while effectively partnering with both engineering and legal teams.
• Ability to be in the office 3x per week
  
  

Preferred

• IAPP certification (CIPP/E, CIPP/US, CIPM, CIPT, or AIGP).
• Experience supporting SOC 2 Type II, ISO 27001/27701, ISO/IEC 42001, HIPAA, or similar compliance frameworks.
• Experience with AI governance, AI/ML compliance, and emerging AI regulations.
• Hands-on experience administering Ketch (preferred) or comparable platforms such as OneTrust, Securiti, or TrustArc.
• Experience supporting global engineering organizations and distributed teams.
• Experience with privacy considerations for real-time communications, video, telephony, or media streaming technologies.
  
  Work Authorization: Applicants must be legally authorized to work in the United States at the time of hire. This position is not eligible for current or future employment visa sponsorship.