Legal Director, Privacy

The posting, as Peloton wrote it

ABOUT THE ROLE

Peloton is seeking an experienced, collaborative leader to join the Legal team as Legal Director, Privacy. This role will be responsible for implementing, managing, and evolving Peloton's global privacy program, playing a pivotal role in our mission to be the most trusted brand in connected fitness.

As a senior leader on our Legal team, you will act as a primary privacy advisor to the business. You will partner closely with leaders across Information Security, Data Analytics, Product, Engineering, Marketing, and other business units to ensure that our commitment to Member trust is embedded in every product we build and every interaction we have.

This role requires a strategic thinker with deep subject matter expertise who can translate complex global regulations into a practical, scalable, and business-enabling privacy framework.

YOUR DAILY IMPACT AT PELOTON

• Lead and refine Peloton's global privacy program, including our policies, procedures, and data governance standards, to ensure compliance with international law
• Partner closely with cross-functional teams to embed privacy by design in our core processes for collecting, maintaining, using and sharing personal data
• Develop and manage our privacy risk management framework, including conducting Data Protection Impact Assessments (DPIAs), managing data subject rights requests, and overseeing privacy incident responses
• Serve as the subject matter expert on global privacy, cybersecurity, and data protection laws. Advise the business on the impact of evolving regulations and continually refine Peloton’s privacy program to reflect best practices
• Develop and deliver engaging privacy training and awareness programs to educate Peloton employees and key stakeholders on their data protection responsibilities
• Serve as the primary legal point of contact for data protection authorities. Prepare and present regular reports on the privacy program's status and risk posture to leadership

YOU BRING TO PELOTON

• J.D. from an ABA-accredited law school and membership in good standing of at least one state bar (New York bar admission preferred)
• 12+ years of legal experience with a significant focus on privacy and data protection, preferably with a combination of law firm and in-house experience
• Demonstrated track record of designing, building, and managing a global privacy compliance program in a technology, media, consumer products, or related industries
• Deep understanding of global data protection laws (e.g., GDPR, CCPA/CPRA) and the ability to translate them into practical business guidance
• Relevant privacy certifications (i.e. CIPP/US, CIPP/E, CIPM) or equivalent practical experience are highly preferred
• Demonstrated ability to lead a corporate function, manage complex cross-functional projects, and influence business partners at all levels through strong collaboration skills
• Strong collaboration skills with a history of partnering effectively across cr

[…]
lerate innovation in the work we do for our members. However, in our hiring process, our priority remains in getting to know you and your unique qualifications. To ensure a fair and equitable process, we do not permit the use of AI tools during any stage of the application and interview process. In considering you as an applicant, we want to understand your skills, experiences, and motivations without mediation through an AI system. We also want to directly assess your communication skills without the use of an AI tool.

Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act, the City of Los Angeles Fair Chance Initiative for Hiring Ordinance and the San Francisco Fair Chance Ordinance, as applicable to applicants applying for positions in these jurisdictions.

Please be aware that fictitious job openings, consulting engagements, solicitations, or employment offers may be circulated on the Internet in an attempt to obtain privileged information, or to induce you to pay a fee for services related to recruitment or training. Peloton does NOT charge any application, processing, or training fee at any stage of the recruitment or hiring process. All genuine job openings will be posted here on our careers page and all communications from the Peloton recruiting team and/or hiring managers will be from an @ onepeloton.com email address.

If you have any doubts about the authenticity of an email, letter or telephone communication purportedly from, for, or on behalf of Peloton, please email applicantaccommodations@onepeloton.com before taking any further action in relation to the correspondence.

Peloton does not accept unsolicited agency resumes. Agencies should not forward resumes to our jobs alias, Peloton employees or any other organization location. Peloton is not responsible for any agency fees related to unsolicited resumes.