Senior Director, Privacy, Product and Platform Security

About the Role

Roblox is looking for a Senior Director, Privacy, Product and Platform Security to lead the teams responsible for protecting the systems, products, services, and data that power the Roblox platform. You will define how security and privacy are engineered into one of the world’s largest platforms, spanning product design, distributed systems, infrastructure, data, privacy, and emerging technology.

You will bring Product Security, Platform Security, and Privacy Engineering together around a unified vision to protect confidentiality, integrity, and availability. Reporting to the Chief Information Security Officer, you will oversee an organization of security engineering leaders and senior individual contributors while partnering closely with Infrastructure, Engineering, Product, Legal, and Compliance leadership.

Responsibilities

• Set the vision, strategy, and multi-year roadmap for Product Security, Platform Security, and Privacy Engineering.
• Lead and grow a high-performing organization of managers and senior technical leaders, fostering a culture of accountability, inclusion, and technical excellence.
• Establish security and privacy architecture principles for Roblox products, services, production platforms, cloud environments, and data systems.
• Raise the security bar across the software development lifecycle through security reviews, threat modeling, secure design, testing, vulnerability management, and risk-based remediation.
• Drive the design and adoption of hardened, secure platforms at Roblox scale in partnership with Infrastructure Engineering.
• Advance Privacy Engineering by embedding privacy-by-design practices and scalable technical controls into product and platform architecture, data flows, and operating processes.
• Translate regulatory and company privacy commitments into engineering requirements, measurable controls, and durable solutions.
• Own cross-functional priorities, metrics, executive reporting, and delivery for risk-reduction programs.

Qualifications

• 15+ years of experience in security engineering, privacy engineering, infrastructure security, or a related technical field.
• 8+ years leading and developing engineering or security organizations.
• Deep technical expertise in at least one security or engineering discipline, with breadth across product, platform, infrastructure, cloud, data, and privacy domains.
• Demonstrated track record of setting strategy and delivering measurable security outcomes across large-scale products, platforms, or distributed systems.
• Experience embedding security and privacy into the SDLC through architecture, standards, tooling, automation, and risk-based prioritization.
• Strong systems thinking and technical judgment across modern production environments (cloud, hybrid, distributed, containerized, and data-intensive systems).
• Results-oriented leadership with the ability to build high-performing teams, lead complex cross-functional initiatives, and communicate technical risk and tradeoffs clearly.