2 months ago
Barcelona, SpainSenior
Responsibilities
- Embed privacy by design into product, platform, and operational workflows.
- Build and maintain Python tools, services, automations, and workflow integrations supporting privacy and compliance operations.
- Design capabilities for data subject rights requests, data lifecycle management, retention, deletion, access, and regulatory compliance.
- Translate legal and regulatory requirements into technical requirements, engineering patterns, implementation guidance, and controls.
- Operate secure, scalable privacy-related systems and integrations in AWS and similar environments.
- Write and deploy SQL to locate, review, archive, purge, and document data for privacy requirements.
- Conduct privacy assessments, identify risks, and drive mitigation through tools, training, and guidance.
- Manage projects and enhancements from requirements gathering through delivery and stakeholder communication.
- Improve documentation, reporting, evidence collection, data quality, and compliance operations through automation.
- Partner with Security, Legal, Engineering, Product, Player Experience, engineers, and architects to deliver privacy-preserving data solutions.
Requirements
- At least 5 years of experience in information security, privacy, compliance, or a related technical role.
- Hands-on experience building or maintaining solutions in Python.
- Strong background in software engineering, backend systems, security, data engineering, or data architecture.
- Experience with AWS and cloud-based architectures.
- Experience with Temporal or similar workflow orchestration tools.
- Working knowledge of APIs, JSON, SQL, and related technical tooling.
- Strong understanding of privacy engineering, privacy by design, data subject rights, and data lifecycle controls.
- Working knowledge of privacy regulations such as GDPR.
- Familiarity with ISO 27001, NIST, or COBIT security and compliance frameworks.
- Experience working cross-functionally with Legal, Security, Product, and Engineering teams.
- Experience with data systems and large datasets, including data flows, retention, deletion, and access patterns.
- Experience leveraging or building AI-enabled tools, assistants, or automation workflows for GRC processes is required.
- Bonus qualifications include DSR, DSAR, or privacy operations platform experience; graduate-level privacy engineering study; gaming or consumer technology experience; internationally distributed team experience; or certifications such as CIPT, CIPP, CIPM, CISSP, CISA, CRISC, or FAIR.
- Strong communication, organizational, analytical, problem-solving, collaboration, prioritization, and ambiguity-navigation skills.
Benefits
- Hybrid work in Barcelona with two days per week from the hub.
- Employment is subject to background checks because the role accesses sensitive or confidential employee, customer, personally identifiable, or company financial information.
- Inclusive, supportive work environment with equal employment opportunities.
About Scopely
Scopely develops, publishes, and live-operates free-to-play games across mobile, PC, and console, including MONOPOLY GO!, Stumble Guys, Star Trek Fleet Command, MARVEL Strike Force, WWE Champions, and Yahtzee With Buddies. Founded in 2011 and headquartered in Culver City, California, it uses its Playgami technology platform and collaborates with studios worldwide. In 2023, Scopely was acquired by Savvy Games Group and continues to operate as an independent subsidiary.