Director, Privacy Compliance

About the teamZillow is transforming how people find, finance, sell, rent, and live in homes. Our platforms, apps, and services power a complex ecosystem of consumers, real estate professionals, lenders, landlords, property managers, and partners. Data and trust are at the center of that ecosystem, and the Privacy team partners across the company to uphold both while enabling innovation.

About the role

As Director, Privacy, you will lead and evolve Zillow’s enterprise privacy compliance program across our online real estate marketplace, adjacent businesses, and internal operations. You’ll set and drive an enterprise-wide privacy strategy in a tech-forward, data-rich environment, ensuring privacy is built into products, experiences, and data platforms by design. You’ll cultivate a pragmatic, collaborative culture—working closely with Privacy Legal, InfoSec, Engineering, Product, Design, and other Compliance teams to deliver product-ready solutions to evolving privacy requirements.

You will get to:

• Design and continuously improve the enterprise privacy program with Privacy Legal (governance model, roles and responsibilities, policies, forums, steering committees).

• Build and maintain the privacy portfolio and roadmap (OKRs, maturity targets, mitigations, remediations) and report progress to senior leadership.

• Launch and scale AI-driven tools and workflows for product advisory support, analytics, PIAs/DPIAs/RoPA, DSARs, TCPA/DNC, and compliance monitoring.

• Establish enterprise privacy governance (steering committees, escalation paths, decision frameworks) and own internal policies, notices, standards, and operational playbooks.

• Create evidence-based compliance by maintaining retention libraries of decisions, risk evaluations, controls, approvals, exceptions, and proof supporting audit, regulatory, diligence, and litigation needs.

• Lead the privacy control framework across access/deletion/correction/opt-out requests, cookies/tracking tech, and marketing/communications rules (e.g., TCPA, CAN-SPAM), integrating with policy governance and exception management.

• Champion privacy by design/default in technical architectures (identity, consent, preferences, logging, data minimization) in close partnership with Engineering, Product, Design, InfoSec, and Compliance.

• Serve as an embedded privacy leader with product teams to interpret and operationalize evolving federal and state laws (e.g., CPRA, CDPA, UCPA, GLBA) and partner with Legal and Government Relations on horizon scanning and proactive strategies.

This role has been categorized as a Remote position. “Remote” employees do not have a permanent corporate office workplace and, instead, work from a physical location of their choice, which must be identified to the Company. U.S. employees may live in any of the 50 United States, with limited exceptions.

In California, Connecticut, Maryland, Massachusetts, New Jersey, New York, Washington state, and Washington DC the standard base pay range for this role is $187,500.00 - $299,500.00 annually. This base pay range is specific to these locations and may not be applicable to other locations. In Colorado, Hawaii, Illinois, Minnesota, Nevada, Ohio, Rhode Island, and Vermont the standard base pay range for this role is $178,100.00 - $284,500.00 annually. The base pay range is specific to these locations and may not be applicable to other locations.

In addition to a competitive base salary this position is also eligible for equity awards based on factors such as experience, performance and location. Actual amounts will vary depending on experience, performance and location. Employees in this role will not be paid below the salary threshold for exempt employees in the state where they reside.

Who you are

• 10+ years in privacy, data protection, or related risk/compliance roles within tech-forward or online platform environments (e.g., marketplaces, SaaS, fintech, ad-tech, consumer apps).

• Deep knowledge of U.S. privacy laws (e.g., CCPA/CPRA, GLBA, TCPA, CAN-SPAM) and industry frameworks (e.g., NIST, ISO, PCI/NACHA); familiarity with GDPR.

• Demonstrated experience maturing privacy programs (governance, policies, PIAs/DPIAs/RoPA, DSARs, notice/consent) aligned with data governance.

• Proven ability to partner with product, design, engineering, and data/analytics teams—able to influence technical and UX decisions to implement privacy by design.

• Strong collaboration record with Legal, Information Security, and Data Governance, including experience with records retention, data classification, and access controls.

• Exceptional communication skills; able to simplify complex regulatory and technical topics for executive, business, and technical audiences.

• Demonstrated people leadership and a builder mentality; bonus points for experience leveraging AI/automation, privacy tools (e.g., DataGrail, Securiti), and exposure to real estate or financial services.

Get to know us

At Zillow, we’re reimagining how people move—through the real estate market and through their careers. As the most-visited real estate platform in the U.S., we help customers navigate buying, selling, financing and renting with greater ease and confidence. Whether you're working in tech, sales, operations, or design, you’ll be part of a company that's reshaping an industry and helping more people make home a reality.

Zillow is honored to be recognized among the best workplaces in the country. Zillow was named one of FORTUNE 100 Best Companies to Work For® in 2025, and included on the PEOPLE Companies That Care® 2025 list, reflecting our commitment to creating an innovative, inclusive, and engaging culture where employees are empowered to grow.

No matter where you sit in the organization, your work will help drive innovation, support our customers, and move the industry—and your career—forward, together.

Zillow Group is an equal opportunity employer committed to fostering an inclusive, innovative environment with the best employees. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. If you have a disability or special need that requires accommodation, please contact your recruiter directly.

Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable state and local law.

Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.