Responsibilities
- Embed privacy by design into product, platform, and operational workflows.
- Build and maintain Python tools, services, automations, and workflow integrations supporting privacy and compliance operations.
- Design capabilities for data subject rights requests, data lifecycle management, retention, deletion, access, and regulatory compliance.
- Translate legal and regulatory requirements into technical requirements, engineering patterns, implementation guidance, and controls.
- Operate secure, scalable privacy-related systems and integrations in AWS and similar environments.
- Write and deploy SQL to locate, review, archive, purge, and document data for privacy requirements.
- Conduct privacy assessments, identify risks, and drive mitigation through tools, training, and guidance.
- Manage projects and enhancements from requirements gathering through delivery and stakeholder communication.
- Improve documentation, reporting, evidence collection, data quality, and compliance operations through automation.
- Partner with Security, Legal, Engineering, Product, Player Experience, engineers, and architects to deliver privacy-preserving data solutions.
Requirements
- At least 5 years of experience in information security, privacy, compliance, or a related technical role.
- Hands-on experience building or maintaining solutions in Python.
- Strong background in software engineering, backend systems, security, data engineering, or data architecture.
- Experience with AWS and cloud-based architectures.
- Experience with Temporal or similar workflow orchestration tools.
- Working knowledge of APIs, JSON, SQL, and related technical tooling.
- Strong understanding of privacy engineering, privacy by design, data subject rights, and data lifecycle controls.
- Working knowledge of privacy regulations such as GDPR.
- Familiarity with ISO 27001, NIST, or COBIT security and compliance frameworks.
- Experience working cross-functionally with Legal, Security, Product, and Engineering teams.
- Experience with data systems and large datasets, including data flows, retention, deletion, and access patterns.
- Experience leveraging or building AI-enabled tools, assistants, or automation workflows for GRC processes is required.
- Bonus qualifications include DSR, DSAR, or privacy operations platform experience; graduate-level privacy engineering study; gaming or consumer technology experience; internationally distributed team experience; or certifications such as CIPT, CIPP, CIPM, CISSP, CISA, CRISC, or FAIR.
- Strong communication, organizational, analytical, problem-solving, collaboration, prioritization, and ambiguity-navigation skills.
Benefits
- Hybrid work in Barcelona with two days per week from the hub.
- Employment is subject to background checks because the role accesses sensitive or confidential employee, customer, personally identifiable, or company financial information.
- Inclusive, supportive work environment with equal employment opportunities.
About Scopely
Scopely is a leading global interactive entertainment and video game company, home to many top-grossing, award-winning franchises, including the most successful mobile game ever launched "MONOPOLY GO!," along with "Stumble Guys," "Star Trek™ Fleet Command," "MARVEL Strike Force," "WWE Champions" and "Yahtzee® With Buddies," among many others. Scopely creates, publishes, and live-operates immersive games across mobile, web, PC and console that empower a directed-by-consumer™ experience. Founded in 2011, Scopely is fueled by a world-class team and a proprietary technology platform Playgami™ that supports one of the most diversified portfolios in the games industry. Recognized multiple times as one of Fast Company’s “World’s Most Innovative Companies” and as a TIME100 “Most Influential Company In the World,” Scopely has surpassed $10 billion in lifetime revenue due to its ability to create long-lasting game experiences that players enjoy for years. Scopely has global operations across North America, Central America, EMEA and Asia, with additional game studio partners across four continents. Scopely was acquired by Savvy Games Group in July 2023 for $4.9 billion, and is now an independent subsidiary of Savvy. For more information on Scopely, visit: scopely.com.