Privacy and Security Analyst

At Webflow, our mission is to bring development superpowers to everyone. Webflow is a Website Experience Platform (WXP) that empowers modern marketing teams to visually build, manage, and optimize stunning websites. With AI-driven personalization baked in, Webflow enables teams to significantly boost conversion rates, translating directly into measurable business growth. From independent designers and creative agencies to Fortune 500 companies, millions worldwide use Webflow to be more nimble, creative, and collaborative.

We’re looking for a dynamic, practical and seasoned Privacy and Security Analyst with a demonstrated passion for technology and privacy to assist with Webflow’s data privacy and security matters. You'll help shape our global privacy and security compliance, drive our data protection initiatives, and help support our initiatives. You’ll be responsible for providing best practices for privacy and security compliance with the goal of propelling Webflow’s mission and objective forward, while prioritizing responsible data governance and compliance with global privacy and security regulations. 

About the role:

• Location: Remote-first (United States; BC & ON, Canada)
• Full-time
• Permanent 
• Exempt
• The cash compensation for this role is tailored to align with the cost of labor in different geographic markets. We've structured the base pay ranges for this role into zones for our geographic markets, and the specific base pay within the range will be determined by the candidate’s geographic location, job-related experience, knowledge, qualifications, and skills.
  
  • Zone A: $115,000 - $155,500
  • Zone B: $108,000 - $146,000
  • Zone C: $101,500 - $137,000
    
• United States  (all figures cited below are in USD and pertain to workers in the United States)

This role is also eligible to participate in Webflow's company-wide bonus program. Target amounts are a percentage of base salary and vary by career level. Payouts are based on company performance against established financial and operational goals. 

Please visit our Careers page for more information on which locations are included in each of our geographic pay zones. However, please confirm the zone for your specific location with your recruiter.

• Reporting to the Lead Global Privacy Counsel

As a Privacy and Security Analyst, you’ll …

• Privacy and Security Program Oversight
  - Support the development, implementation, and maintenance of Webflow’s privacy and security program, policies, and procedures
  - Ensure compliance with applicable federal, state and industry privacy regulations
  - Respond to DSRs, and improve PIAs, Incident Plan processes, and Privacy/Security controls
  - Implement and manage data privacy and security compliance tools
• Risk Assessments and Audits
  - Conduct regular privacy and security risk assessments to identify vulnerabilities and recommend mitigation strategies
  - Participate in internal audits and collaborate with internal/external auditors to address compliance with gaps
• Incident Management
  - Investigate and manage privacy incidents, breaches, or complaints, ensuring timely reporting and remediation in compliance with regulatory requirements
  - Prepare and maintain breach notification documents and data bases
• Policy Development and Training
  - Develop and update privacy-related policies, guidelines, and procedures
  - Create and deliver training materials to educate employees on privacy standards and best practices
• Monitor and Reporting
  - Develop and maintain proactive auditing and monitoring program
  - Monitor regulatory developments and industry trends to ensure organizational policies remain up-to-date
  - Generate reports and metrics to track compliance with privacy standards and identify areas for improvement
• Data Sharing and Agreements
  - Understand data-sharing agreements, and other relevant contracts to ensure regulatory compliance
  - Collaborate and address non-standard agreements or high-risk engagements

About you:

You’ll thrive as a Privacy and Security Analyst if you:

• Have at least 5 years of experience in privacy compliance, data governance, or similar legal/compliance analyst
• Bachelor's Degree or equivalent experience
• Have strong knowledge of privacy regulations
• Demonstrated experience managing privacy and security incidents and conduct privacy risk assessments
• Proficiency with Project Management, Workflow Tools (JIRA, Confluence, etc.)
• Have experience with a privacy compliance tool
• Experience with Privacy-by-Design and integrating privacy principles into business processes
• Preferred certifications: CIPP, CIPT, or CIPM 

In addition to the responsibilities outlined above, at Webflow we will support you in identifying where your interests and development opportunities lie, and we'll help you incorporate them into your role.

Our Core Behaviors:

• Obsess over customer experience. We deeply understand what we’re building and who we’re building for and serving. We define the leading edge of what’s possible in our industry and deliver the future for our customers
• Move with heartfelt urgency. We have a healthy relationship with impatience, channeling it thoughtfully to show up better and faster for our customers and for each other. Time is the most limited thing we have, and we make the most of every moment
• Say the hard thing with care. Our best work often comes from intelligent debate, critique, and even difficult conversations. We speak our minds and don’t sugarcoat things — and we do so with respect, maturity, and care
• Make your mark. We seek out new and unique ways to create meaningful impact, and we champion the same from our colleagues. We work as a team to get the job done, and we go out of our way to celebrate and reward those going above and beyond for our customers and our teammates

Benefits & wellness

• Equity ownership (RSUs) in a growing, privately-owned company
• 100% employer-paid healthcare, vision, and dental insurance coverage for full-time employees (working 30+ hours per week) and their dependents. Full-time employees may also be eligible for voluntary insurance options where applicable in the respective country of employment
• 12 weeks of paid parental leave for both birthing and non-birthing caregivers, as well as an additional 6-8 weeks of pregnancy disability leave for birthing parents to be used before child bonding leave (note: where local requirements are more generous, employees receive the greater benefit); full-time employees also have access to family planning care and reimbursement
• Flexible PTO for all locations and sabbatical program
• Access to mental wellness and professional coaching, therapy, and Employee Assistance Program
• Monthly stipends to support work and wellness
• 401k plan or pension schemes (in countries where statutorily required), and other financial wellness benefits, like CPA and financial advisor coverage

Temporary employees may be eligible for paid holiday and time off, statutory leaves of absence, and company-sponsored medical benefits depending on their Fixed Term Contract and their country/state of employment.

Remote, together

At Webflow, equality is a core tenet of our culture. We are an Equal Opportunity (EEO)/Veterans/Disabled Employer and are committed to building an inclusive global team that represents a variety of backgrounds, perspectives, beliefs, and experiences. Employment decisions are made on the basis of job-related criteria without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other classification protected by applicable law. Pursuant to the San Francisco Fair Chance Ordinance, Webflow will consider for employment qualified applicants with arrest and conviction records.

Stay connected

Not ready to apply, but want to be part of the Webflow community? Consider following our story on our Webflow Blog, LinkedIn, X (Twitter), and/or Glassdoor. 

Please note:

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Upon interview scheduling, instructions for confidential accommodation requests will be administered.

To join Webflow, you'll need a valid right to work authorization depending on the country of employment.

If you are extended an offer, that offer may be contingent upon your successful completion of a background check, which will be conducted in accordance with applicable laws. We may obtain one or more background screening reports about you, solely for employment purposes.

For information about how Webflow processes your personal information, please review Webflow’s Applicant Privacy Notice.