Legal Director, Privacy

Peloton is seeking an experienced, collaborative leader to join the Legal team as Legal Director, Privacy. This role will be responsible for implementing, managing, and evolving Peloton's global privacy program, playing a pivotal role in our mission to be the most trusted brand in connected fitness.

As a senior leader on our Legal team, you will act as a primary privacy advisor to the business. You will partner closely with leaders across Information Security, Data Analytics, Product, Engineering, Marketing, and other business units to ensure that our commitment to Member trust is embedded in every product we build and every interaction we have.

This role requires a strategic thinker with deep subject matter expertise who can translate complex global regulations into a practical, scalable, and business-enabling privacy framework.

Your Daily Impact at Peloton

• Lead and refine Peloton's global privacy program, including our policies, procedures, and data governance standards, to ensure compliance with international law.
• Partner closely with cross-functional teams to embed privacy by design in our core processes for collecting, maintaining, using and sharing personal data.
• Develop and manage our privacy risk management framework, including conducting Data Protection Impact Assessments (DPIAs), managing data subject rights requests, and overseeing privacy incident responses.
• Serve as the subject matter expert on global privacy, cybersecurity, and data protection laws. Advise the business on the impact of evolving regulations and continually refine Peloton’s privacy program to reflect best practices.
• Develop and deliver engaging privacy training and awareness programs to educate Peloton employees and key stakeholders on their data protection responsibilities.
• Serve as the primary legal point of contact for data protection authorities. Prepare and present regular reports on the privacy program's status and risk posture to leadership.

You Bring to Peloton

• J.D. from an ABA-accredited law school and membership in good standing of at least one state bar (New York bar admission preferred).
• 12+ years of legal experience with a significant focus on privacy and data protection, preferably with a combination of law firm and in-house experience.
• Demonstrated track record of designing, building, and managing a global privacy compliance program in a technology, media, consumer products, or related industries.
• Deep understanding of global data protection laws (e.g., GDPR, CCPA/CPRA) and the ability to translate them into practical business guidance.
• Relevant privacy certifications (i.e. CIPP/US, CIPP/E, CIPM) or equivalent practical experience are highly preferred.
• Demonstrated ability to lead a corporate function, manage complex cross-functional projects, and influence business partners at all levels through strong collaboration skills.
• Strong collaboration skills with a history of partnering effectively across cross-functional teams and explaining legal principles clearly to non-legal audiences.
• Familiarity with information security principles and health, fitness, and advertising technology trends.

Benefits

• Medical, dental and vision insurance.
• Generous paid time off policy.
• Short-term and long-term disability.
• Access to mental health services.
• 401k, tuition reimbursement and student loan paydown plans.
• Employee Stock Purchase Plan.
• Fertility and adoption support and up to 18 weeks of paid parental leave.
• Child care and family care discounts.
• Free access to Peloton Digital App and apparel and product discounts.
• Commuter benefits and Citi Bike Discount.
• Pet insurance and so much more!