Legal Director, Privacy

ABOUT THE ROLE Peloton is seeking an experienced, collaborative leader to join the Legal team as Legal Director, Privacy. This role will be responsible for implementing, managing, and evolving Peloton's global privacy program, playing a pivotal role in our mission to be the most trusted brand in connected fitness. As a senior leader on our Legal team, you will act as a primary privacy advisor to the business. You will partner closely with leaders across Information Security, Data Analytics, Product, Engineering, Marketing, and other business units to ensure that our commitment to Member trust is embedded in every product we build and every interaction we have. This role requires a strategic thinker with deep subject matter expertise who can translate complex global regulations into a practical, scalable, and business-enabling privacy framework. YOUR DAILY IMPACT AT PELOTON Lead and refine Peloton's global privacy program, including our policies, procedures, and data governance standards, to ensure compliance with international law Partner closely with cross-functional teams to embed privacy by design in our core processes for collecting, maintaining, using and sharing personal data Develop and manage our privacy risk management framework, including conducting Data Protection Impact Assessments (DPIAs), managing data subject rights requests, and overseeing privacy incident responses Serve as the subject matter expert on global privacy, cybersecurity, and data protection laws. Advise the business on the impact of evolving regulations and continually refine Peloton’s privacy program to reflect best practices Develop and deliver engaging privacy training and awareness programs to educate Peloton employees and key stakeholders on their data protection responsibilities Serve as the primary legal point of contact for data protection authorities. Prepare and present regular reports on the privacy program's status and risk posture to leadership YOU BRING TO PELOTON J.D. from an ABA-accredited law school and membership in good standing of at least one state bar (New York bar admission preferred) 12+ years of legal experience with a significant focus on privacy and data protection, preferably with a combination of law firm and in-house experience Demonstrated track record of designing, building, and managing a global privacy compliance program in a technology, media, consumer products, or related industries Deep understanding of global data protection laws (e.g., GDPR, CCPA/CPRA) and the ability to translate them into practical business guidance Relevant privacy certifications (i.e. CIPP/US, CIPP/E, CIPM) or equivalent practical experience are highly preferred Demonstrated ability to lead a corporate function, manage complex cross-functional projects, and influence business partners at all levels through strong collaboration skills Strong collaboration skills with a history of partnering effectively across cross-functional teams and explaining legal principles clearly to non-legal audiences Familiarity with information security principles and health, fitness, and advertising technology trends #LI-SV1 #LI-Hybrid The base salary range represents the low and high end of the anticipated salary range for this position based at our New York City headquarters. The actual base salary offered for this position will depend on numerous factors including, without limitation, experience and business objectives and if the location for the job changes. Our base salary is just one component of Peloton’s competitive total rewards strategy that also includes annual equity awards and an Employee Stock Purchase Plan as well as other region-specific health and welfare benefits. As an organization, one of our top priorities is to maintain the health and wellbeing for our employees and their family. To achieve this goal, we offer robust and comprehensive benefits including: Medical, dental and vi