Sr Principal Research Engineer
HERE Technologies24 hours ago
Kraków, PolandStaff+
Responsibilities
- Design and deliver tooling, infrastructure, and workflows that automate DPIAs, RoPA, DSRs, privacy assessments, consent management, retention controls, and evidence collection.
- Own and continuously improve HERE’s Privacy by Design framework, including threshold assessments, DPIA methodology, privacy requirements engineering, and review governance.
- Automate and improve end-to-end Data Subject Rights processes, including data discovery, fulfillment, auditability, and operational metrics.
- Develop privacy risk-estimation scanners for data and code, including detection of direct and indirect identifiers, and build related metadata, telemetry, dashboards, and KPIs.
- Advise Product, Engineering, Architecture, and Security teams on privacy-by-design implementation and define engineering patterns, reference architectures, and technical standards.
- Partner with Product, Engineering, Security, Legal, and Privacy teams to conduct technical privacy and risk assessments and promote scalable privacy engineering practices.
Requirements
- Degree in Computer Science, Mathematics, or another relevant technical field.
- Significant experience in privacy engineering, privacy architecture, or a comparable technical privacy role implementing Privacy by Design in production systems.
- Extensive experience designing, operating, and improving end-to-end DSR processes and their automation tooling.
- Extensive experience conducting DPIAs, privacy threshold assessments, and product, platform, AI system, and emerging-technology privacy assessments.
- Deep expertise in systems architecture, cloud environments, and Privacy-Enhancing Technologies, with production implementation experience.
- Experience improving privacy operations through bottleneck analysis, automation tooling, and scalable governance mechanisms.
- Understanding of privacy and AI governance requirements and frameworks including GDPR, the NIST Privacy Framework, and ISO/IEC 27701.
- Experience leveraging AI to optimize privacy workflows and scalable privacy governance.
- Knowledge of multiple backend languages such as Java and Python.
- Experience developing, testing, and deploying code for automated pipeline execution, including the GitLab CI/CD environment.
- Experience defining, implementing, and validating technical privacy controls in cloud-native architectures, APIs, data platforms, and customer-facing products.
- Hands-on experience managing and interfacing with RESTful APIs and implementing Privacy-Enhancing Technologies in production.
- Location privacy experience is a plus, including protection and governance of geospatial and location-derived data.
- LLM model training and tuning experience is an advantage.
- Privacy certifications such as CIPT, CIPP/E, or CDPSE are a strong plus.
- Excellent written and spoken English, autonomy, end-to-end initiative ownership, and ability to mentor peers.
Benefits
- Competitive salary plus bonus.
- Flexible working hours and a hybrid working environment.
- Medical coverage for the employee and family, with private medical care including dental.
- Eligibility for the Creative Tax Incentive scheme in Poland or KUP.
- Option to work on a B2B contract; benefits, bonus, and KUP do not apply under this option.
- Life insurance, meal allowance, vision reimbursement, remote work allowance if applicable, MyBenefit and Multisport programs, and wellbeing initiatives.
- Paid time off, sick leave, and parental leave in accordance with the Polish Labor Code.
- Opportunity to work on meaningful mobility and technology problems with learning, feedback, and a collaborative team environment.
- Successful completion of pre-employment screening, including employment, education, and criminal verification if applicable.
About HERE Technologies
HERE Technologies builds a location data and mapping platform used by automakers, logistics providers, and enterprises to power navigation, routing, and geospatial analytics. It sells map data, APIs/SDKs, and platform services for fleet, mobility, and supply-chain applications. The company traces its roots to Navteq (founded 1985) and Nokia Maps, and is privately held with headquarters in Eindhoven, Netherlands.