Sr. Data & Privacy Lead

The Mozilla Foundation is a nonprofit public benefit organization. Our mission is to ensure that the Internet is a global public resource, open and accessible to all. Join us and become part of our mission to promote openness, innovation, and opportunity online!

Twenty years ago, this meant building a browser and protecting the open web. Today, it also includes making sure AI and data driven technology is more trustworthy. In order to focus on places where Mozilla can impact the next era of our work, we are increasingly working on the topic of trustworthy AI. For us, this means especially two things: human agency is a core part of how AI is built and integrated, and corporate accountability is real and enforced.

The Technology Platforms team stewards the Foundation’s technology platforms and products, provides partnership and expertise around tools selection, and seeks to understand the business needs and impact goals to ensure that our technology solutions meets those needs.

The Senior Data and Privacy Lead on the Technology Platforms team leads out on the strategy and implementation for how Mozilla Foundation can responsibly collect and use data, in line with Mozilla values and lean data practices. The Senior Data and Privacy Lead works closely with partners across Mozilla Foundation to review and advise on vendor processes and practices, integrations, and contracts as it relates to data collection, security and privacy. The person in this role will enable teams to develop data as a business asset for the Foundation - ensuring data governance, interoperability, trustworthiness, accessibility, and consistency in internal and external messaging.

 

Here are some projects you'll likely work on in your first 6 months:

• Learning more and immersing yourself in Mozilla’s messaging, policies, and approaches to data privacy.
• Develop an understanding and map where Mozilla Foundation currently collects data, and in partnership with various collaborators, begin to develop what a desired future state may look like.
• In partnership with our legal team(s), begin to capture and enhance policies around the collection and storage of data.
• Lead privacy reviews for data collection and vendor negotiations in partnership with various partners across the organization.

As a Sr. Data & Privacy Lead at Mozilla Foundation, you will…

Strategy for responsible data collection & use - 40%

• Set strategy and implement process for Foundation to serve as a model for how other organizations can responsibly collect and use data.
• Lead data governance working group within the Foundation.
• Serve as a liaison and act as a subject matter expert to Pan-Mozilla data governance working groups.
• Monitor and address data governance risk & issues.
• Serve as a subject matter expert and advisor to the teams across the organization on data privacy and security as related to their activities.
• Serve as a subject matter expert in data & privacy to Mozilla Foundation staff & fellows to ensure overall alignment of practice and external messaging across the organization
• Synthesize advocacy and policy work completed by Mozilla to help inform programs, campaigns, and messaging work at foundation.
• Review all Mozilla research/advocacy publications that touch on privacy to ensure alignment and consistency in messaging and practice
• Review and audit privacy policies of third party companies included in Mozilla publications

Data Inventory & Privacy Reviews - 25% of time

• Provide overall day to day oversight and recommendations for how we collect, store, and use data.
• Develop a repeatable process and conduct data audits of Mozilla Foundation systems; document in a central location and partner with others to ensure data inventories are aligned across the Mozilla enterprise.
• Lead and manage annual re-assessment for previously assessed systems and provide documentation
• Lead the review of privacy approach to all elements of data collection occurring at the foundation [i.e, DEI, employee data, surveys (internal and external), donor data, research tools (Regrets Reporter)] to ensure compliance with regulatory requirements, as well as consistency with Mozilla’s existing privacy policies and external commitments and messaging.
• Participate and engage in Pan-Mozilla advisory committees on data privacy and data collection.

Contract and Vendor Reviews - 25% of time

• Review prospective vendors to understand and vet their data collection and handling practices, ensuring the practices are compliant and align with Mozilla’s existing privacy polici