Privacy & Security Counsel

Join Roblox as a Privacy & Security Counsel, where you will provide legal guidance on global security and privacy laws, engage in incident response, support security compliance initiatives, and offer cross-functional legal advice. You will be embedded within security teams and have the opportunity to make a significant impact in a fast-paced technology company.

USD 168,100 - 211,760

Responsibilities

• Provide subject-matter expertise and guidance on the evolving global security and privacy legal landscape, translating analysis into clear, concise, and actionable guidance.
• Engage with the Detection and Response and Global Security teams during incidents, providing legal guidance throughout the incident lifecycle.
• Own and deliver complex, cross-functional cybersecurity legal initiatives end-to-end, including AI and agentic-AI governance, new regulatory regimes, and major incident response improvements.

Requirements

• Active membership in at least one U.S. state bar; California Bar admission preferred
• Training at a major national law firm; in-house experience a plus

Excellent business-oriented judgment

• Knowledge of security regulations, laws, and frameworks, such as GDPR, NIS2, CRA, CCPA, COPPA, CA SB 553, NIST CSF, and PCI
• Exceptional written and verbal communication skills, including the ability to “speak the language of the business” (not the law firm) and tailor messaging to executives, engineers, and operations teams
• Experience implementing global data protection and security requirements
• Experience with security incidents including, breaches, breach reporting to regulators, customer notifications
• 4+ years of data security, data privacy, data protection and governance experience
• Expertise in US and global data security and protection laws and regulations
• Proven track record of taking ambiguous, cross-functional projects from concept to delivery, using strong project management skills to drive accountability and hit deadlines
• Working familiarity with large-scale, modern infrastructure (e.g., cloud platforms, microservices, observability, incident management tooling) sufficient to understand how technical architectures influence legal risk and incident response
• Experience working with Information Security teams, including Incident Response, Application Security and Governance

Preferred

• Experience operating as a senior individual contributor in a fast-paced technology company, driving complex, cross-functional programs