Legal Director, Privacy – Privacy Law

Job Description

Legal Director, Privacy | Peloton Interactive

The Tone:
This is a full-time role at Peloton Interactive, located in New York, NY. Peloton provides Members with expert instruction and world-class content to create impactful and entertaining workout experiences for anyone, anywhere. This role is crucial for implementing, managing, and evolving Peloton’s global privacy program, playing a pivotal part in the mission to be the most trusted brand in connected fitness by embedding member trust in every product and interaction.

The TL;DR
• Role: Full Time
• Type: Full-time
• Location: In-person New York, NY
• Pay: $277000–$352900 yearly
• Team: Legal team
• Mission: To implement, manage, and evolve Peloton’s global privacy program, ensuring compliance with international law and embedding member trust.

What You’ll Actually Do
• Program Leadership: Lead and refine Peloton’s global privacy program, including policies, procedures, and data governance standards, to ensure compliance with international law.
• Privacy by Design: Partner closely with cross-functional teams to embed privacy by design in core processes for collecting, maintaining, using, and sharing personal data.
• Risk Management: Develop and manage the privacy risk management framework, including conducting Data Protection Impact Assessments (DPIAs), managing data subject rights requests, and overseeing privacy incident responses.
• Expert Advice: Serve as the subject matter expert on global privacy, cybersecurity, and data protection laws, advising the business on evolving regulations and refining the privacy program.
• Training and Awareness: Develop and deliver engaging privacy training and awareness programs to educate Peloton employees and key stakeholders on their data protection responsibilities.

The Must-Haves
• Background: Juris Doctor from an ABA-accredited law school and membership in good standing of at least one state bar, with a significant focus on privacy and data protection.
• Experience: 12+ years of legal experience, preferably with a combination of law firm and in-house experience, and a demonstrated track record of designing, building, and managing a global privacy compliance program in technology, media, consumer products, or related industries.
• Skills: Deep understanding of global data protection laws (e.g., GDPR, CCPA/CPRA) and the ability to translate them into practical business guidance. Strong collaboration skills with a history of partnering effectively across cross-functional teams and explaining legal principles clearly to non-legal audiences. Demonstrated ability to lead a corporate function, manage complex cross-functional projects, and influence business partners at all levels.
• Bonus: Relevant privacy certifications (i.e. CIPP/US, CIPP/E, CIPM) or equivalent practical experience, and familiarity with information security principles and health, fitness, and advertising technology trends.