Legal Director, Privacy

Peloton Interactive, Inc.•New York, NY

71d•Hybrid

About The Position

Peloton is seeking a dynamic and experienced legal leader to join the Legal team as Director of Privacy. This individual will be responsible for implementing, managing and evolving Peloton's global privacy program, playing a pivotal role in our mission to be the most trusted brand in connected fitness. As a senior member of the Legal team, you will serve as the company's primary privacy expert and a key stakeholder in our legal organization. You will partner closely with leaders across Information Security, Data Analytics, Product, Engineering, Marketing, and other business units to ensure that our commitment to Member trust is embedded in every product we build and every interaction we have. This role requires a strategic thinker with deep subject matter expertise who can translate complex global regulations into a practical, scalable, and business-enabling privacy framework.

Requirements

J.D. from an ABA-accredited law school and membership in good standing of at least one state bar (New York bar admission preferred).
12+ years of legal experience with a significant focus on privacy and data protection, preferably with a combination of law firm and in-house experience.
A proven track record of designing, building, and managing a global privacy compliance program in a technology, media, or consumer products company.
Deep subject matter expertise in global privacy regimes (e.g., GDPR, CCPA/CPRA) and experience applying them in a practical, business-focused manner.
Demonstrated ability to lead a corporate function, manage complex cross-functional projects, and influence business partners at all levels through strong collaboration skills.
Excellent business judgment and communication skills, with the ability to translate complex legal requirements into practical, actionable advice for a non-legal audience.
Awareness of industry trends in technology, particularly in the health, fitness, and advertising sectors.

Nice To Haves

CIPP/US, CIPP/E, CIPM, or other relevant privacy certifications are highly preferred.
Experience with cybersecurity principles and information security frameworks is a significant plus.

Responsibilities

Lead the execution and evolution of Peloton's global privacy program, including our policies, procedures, and data governance standards, to ensure compliance with international law.
Partner closely with business stakeholders to embed privacy by design in our core processes for collecting, maintaining, using and sharing personal data.
Develop and manage the privacy risk management framework, including conducting Data Protection Impact Assessments (DPIAs), managing data subject rights requests, and overseeing incident response from a privacy perspective.
Serve as the subject matter expert on global privacy and data protection laws. Advise the business on the impact of evolving regulations on our business and continually refine Peloton's privacy program to reflect best practices.
Own and deliver a comprehensive privacy training and awareness program to educate Peloton employees and key stakeholders on their data protection responsibilities.
Serve as the primary legal point of contact for data protection authorities. Prepare and present regular reports on the privacy program's status and risk posture to leadership.