Overview In this role, you will serve as a trusted privacy and security legal expert to Roblox's global teams. You'll translate complex laws into actionable guidance for Legal and Security stakeholders and lead legal support during incidents. You'll drive end-to-end cybersecurity initiatives, including governance for AI and data protection regimes, and embed with security pods to align legal advice with Roblox's architecture and operations. This fast-paced role offers significant impact on regulatory readiness and cross-functional collaboration.
Compensation / Benefits- equity compensation
- benefits as described on page
- hybrid work model
Responsibilities- Provide subject-matter expertise on global security and privacy law and translate analysis into actionable guidance
- Engage with Detection & Response and Global Security teams during incidents, supporting lifecycle from triage to regulator reporting and customer notifications
- Own and deliver cross-functional cybersecurity legal initiatives end-to-end, including AI governance and incident response improvements
- Embed within security pods to act as a trusted legal partner for Application Security, GRC, Privacy Engineering, Global Security, and Infrastructure teams
- Provide cross-functional legal advice to corporate, employment, compliance, policy, regulatory, product, privacy, and commercial teams
Key requirements- 4+ years in data security, privacy, and governance
- Expertise in US and global data protection laws and regulations
- Knowledge of GDPR, NIS2, CRA, CCPA, COPPA, CA SB 553, NIST CSF, PCI
- Experience with Incident Response and breach reporting to regulators and customers
- Active membership in at least one U.S. state bar (California Bar preferred)
- Experience as a senior contributor in a fast-paced tech company; strong project management and communication skills
- Familiarity with large-scale infrastructure, cloud platforms, microservices, and incident tooling
- excellent business-oriented judgment
- clear written and verbal communication tailored to executives, engineers, and operations
- ability to drive cross-functional programs and accountability
- privacy & security law expertise
- incident response governance
- AI governance and regulatory readiness
