Senior Security Privacy Engineer

Stem provides clean energy solutions and services designed to maximize the economic, environmental, and resiliency value of energy assets and portfolios. Stem’s leading AI-driven enterprise software platform, Athena®, enables organizations to deploy and unlock value from clean energy assets at scale. Powerful applications, including AlsoEnergy’s PowerTrack, simplify and optimize asset management and connect an ecosystem of owners, developers, assets, and markets. Stem also offers integrated partner solutions to help improve returns across energy projects, including storage, solar, and EV fleet charging. For more information, visit www.stem.com.

Stem’s culture embodies diversity & inclusion beyond the traditional facets of gender, ethnicity, age, disabilities, and sexual orientation to include experience, personality, communication, workstyles, and more. At our core, Stem is at the momentous intersection of clean energy and software technology where diverse ideas, experiences, and professional skills converge to make the inclusive culture we have today. Together, we are turning old school thoughts about software and energy into progressive, collaborative, and innovative solutions. By joining our team, you will be collaborating with data scientists, energy experts, skilled salespeople, thought-leading executives and more from a range of backgrounds. This intersection of ideas, beliefs, and skills is what makes us unique enough to lead the world’s largest network of digitally connected energy storage systems.

As the Security Privacy Engineer, you will assist in the assessment of the organization’s environment’s privacy best practices in alignment with international and national laws where the organization has operations or clients.  This role requires documenting and reporting gaps in meeting privacy requirements (such as GDPR, PIDPT, CCPA, CPRA, etc.) and defining measures to prevent violation of these requirements.  Knowledge in Artificial Intelligence regulations (national and international) is beneficial in supporting this role. 

The Security Privacy Engineer will help plan and carry out the organization’s privacy policy strategy.  They help develop privacy standards and best practices for the organization and recommend privacy enhancements to management as needed. They develop strategies to ensure alignment with the ever-changing privacy laws and requirements. They are also responsible for educating the workforce on privacy requirements through training and building awareness.  Additionally, knowledge in the workings of artificial intelligence will benefit in the support of this role. 

Responsibilities: 

• Develop and implement solutions to ensure privacy policies are correctly implemented. The implementations should advance compliance with legal forms of data use as well as support business use of data. 

• Work to align advanced technologies and Privacy by Design principles from the first stages of development and ensure that the data use meets established regulatory compliance needs.  

• Collaborate with data product development teams creating new uses of data that employ privacy features. 

• Interacting with internal privacy program managers, product development teams, legal, compliance, governance, and data protection teams.  

• Analyze, design and program software enhancements for new data streams with a goal of developing technical solutions and systems to help mitigate privacy vulnerabilities and prevent potential future privacy risks. 

• Responsible for assisting with the management of the data privacy, data protection, data usability, performance, and the integrity of the privacy solution. 

• Interact with users to define system requirements and/or necessary modifications to new or existing software.  

• Interface with other developers and architects in implementing big data solutions that enable the business to be data driven while protecting the data assets.  

• Interface with usability team to ensure user-facing privacy controls are usable. 

• Use data anonymization, pseudonymization, and encryption to develop systems that preserve and improve privacy protections. 

• Guide the development of new privacy products and features. 

• Identify areas of improvement in local practices relative to managing data privacy. 

• Performs regular privacy assessments of operational processes, identifying, and mitigating risks across the company through effective tools, training, and guidance. 

• Communicates program progress, escalations, and issue analysis to key stakeholders. 

• Acts as key interface to data science and analytics communities both within and outside of the organization 

• Evaluating machine learning processes knowledge is an added value, but not required 

• Collecting and analyzing large amounts of data is an added value, but not required 

• Collaborating with other team members to establish goals for AI processes is an added value, but not required 

• Evaluating the effectiveness of AI is an added value, but not required 

• Managing data and project infrastructure in support of Change Control Board objectives is an added value, but not required 

• Staying up to date on the latest AI developments is an added value, but not required 

Qualifications: 

• Bachelor’s degree in computer science or related field with concentration on privacy engineering. 

• Ability to prioritize projects. 

• Comfortable working in a fast-paced environment. 

• Excellent communication skills. 

• Certifications such as CIPT desired. 

• An understanding of best practices and how to implement them at a business-wide level. 

• At least 4 years' experience in the privacy / data protection industry. 

• Critical thinking skills and the ability to solve problems as they arise. 

• Direct experience with International and National Privacy Laws and Requirements. 

• Knowledge of disaster recovery, computer forensic tools, technologies, and methods around data protection. 

• Experience planning, researching, and developing privacy policies, standards, and procedures. 

• Experience in NIST 800 series standards and NIST Privacy Framework, preferred. 

• Ability to communicate privacy issues to peers and management. 

• Analyze systems and seek improvements on a continuous basis. 

• Deep understanding of how artificial intelligence works is an added value, but not required 

• Attention to detail and concentration 

Work Environment: 

• This position is based in Boulder. We are open to remote candidates if the fit is right. 

• Moderate to high noise levels (i.e. business office with computers, phone, printers, moderate traffic) 

• Ability to sit or stand (standing desk provide upon request) at a computer terminal for an extended period 

Physical Demands: 

• While performing the duties of this job, the employee is regularly required to communicate (talk/sign/type/write) and operate a computer, telephone (or alternative), keyboard (or typing device), etc. 

• Specific vision abilities required by this job include close vision requirements due to computer work 

• Regular, predictable attendance is required 

Salary Range

Stem, Inc. is an equal opportunity employer committed to diversity in the workplace and does not discriminate against any employee or applicant for employment because of race, color, sex, pregnancy, religion, national origin, ethnicity, citizenship, sexual orientation, gender identity, age, marital status, disability, genetic information, military status, protected veteran status or any other factor protected by applicable federal, state or local laws.