Senior Privacy Engineer

The Security team at Asana is responsible for protecting Asana’s employees, users, and customers. We build innovative safeguards to ensure that our data is protected against threats and that we comply with legal, regulatory, and customer requirements while collaborating closely with teams across the organization. Reporting to Asana’s Head of Global Privacy, Data Protection, and Compliance, as a founding member of the Privacy Engineering team, you will shape how we build privacy into our products from the ground up—bridging the legal, regulatory, and technical dimensions of privacy across the company.

This role can either be fully remote depending on which US state you live in, or based in our San Francisco office with an office-centric hybrid schedule. If based in-office: The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner. If you're interviewing for this role, your recruiter will share more about the in-office requirements.

What you’ll achieve

• Lead technical privacy-by-design reviews for new features and major architectural changes, embedding privacy controls early in the development lifecycle across our business, data, and product infrastructure.

• Help drive compliance with global privacy regulations (such as GDPR and CCPA) by translating legal requirements into concrete engineering standards, frameworks, and tooling that facilitate velocity.

• Evaluate and mitigate privacy risks in AI/ML systems, including training data pipelines and model outputs.

• Build and operate systems that enable data rights for our users and privacy-enhancing technologies (PETs), such as data minimization and de-identification frameworks.

• Conduct privacy impact assessments and threat modeling for high-risk data processing activities.

• Advocate for privacy-preserving solutions, serve as a trusted technical advisor across the business, and identify new opportunities to improve our overall privacy posture.

• Partner cross-functionally to ensure our privacy policies and not