Deepgram - Privacy Operations Lead
Requirements
• Substantial experience in privacy operations, legal operations, or technical privacy and compliance — enough that you have run assessments end to end and owned the outcome. • Demonstrated ownership of privacy operational systems at scale: data maps, DSAR workflows, consent management, retention processes, or the tooling behind them. • Technically fluent and unintimidated: you can read an architecture diagram, follow a data flow through datacenter and cloud infrastructure, understand what a log line or a retention setting actually implies, and ask the questions that expose a gap — without needing someone to translate for you. • Practical, applied experience with GDPR and CCPA/CPRA, and a current view of where AI regulation is heading. • Able to hold your own with a Fortune 500 privacy team or DPO without escalating every question. • Clear writer. A large share of this job is producing documents that customers, auditors, and engineers rely on. • Strong bias toward automating and documenting your own work rather than becoming the bottleneck for it. • Comfortable with ambiguity and with making a defensible call when the law is unsettled. • CIPM, CIPT, CIPP/E, or equivalent certification. • Comfort reading code (Python, Go, Rust, or TypeScript), writing SQL, or scripting your own tooling. • Familiarity with on-premise or colocation infrastructure, containerized (Docker) workloads, and how data residency works outside a single cloud provider; AWS familiarity a plus. • Experience with ML/AI data pipelines and training-data governance. • Privacy work in a hybrid model — multi-tenant SaaS alongside self-hosted or on-premise deployments. • Exposure to formal audits: SOC 2, ISO 27001, HIPAA, PCI DSS. • Notice: We're aware of individuals impersonating Deepgram recruiters. All legitimate Deepgram recruiting communication comes from an @deepgram.com http://deepgram.com email address. If you've received a message claiming to be Deepgram, please forward it to [email protected].
Responsibilities
• Own customer and prospect privacy risk assessments, DPIAs, and transfer impact assessments end to end. Be the technical voice in customer privacy reviews and vendor due diligence calls. • Build and maintain accurate data flow maps and records of processing across hosted, dedicated, and self-hosted deployments — including which datacenter, region, or cloud each flow touches — and own the process that keeps them accurate as the product changes. • Translate GDPR, UK GDPR, CCPA/CPRA and other US state privacy laws, and emerging AI regulation (EU AI Act, state AI and automated decision-making rules) into concrete requirements that engineering and GTM teams can act on, rather than memos. • Define the privacy requirements for product and infrastructure changes — retention, logging and telemetry, third-party subprocessors, training-data lineage — and drive them to implementation with the owning teams. • Own the operating model for our privacy controls: retention and deletion enforcement, DSAR and deletion workflows, consent and opt-out handling, de-identification and redaction. You specify, instrument, test, and audit; Engineering builds. • Design and run operational auditing and remediation workflows, so drift between what we claim and what we do is caught by process rather than by a customer. • Own the subprocessor and vendor privacy review process — including colocation and infrastructure providers — and the artifacts that support our DPAs and trust center. • Own privacy enablement: playbooks, self-service guidance, and training for Engineering, Support, and Sales Engineering — including what Sales Engineering is and is not allowed to promise. • Partner with Legal on DPAs, SCCs, transfer mechanisms, and the residency commitments we make for dedicated deployments. • Partner with Security so that privacy evidence and security evidence (SOC 2, ISO 27001, PCI DSS) are produced once and reused.
Benefits
• Tier 1(San Francisco, Seattle, NYC) $179K – $223.3K • Offers Equity • Offers Bonus • 10% Annual Bonus • Tier 2(Everywhere else in US) $165K – $206.2K • Offers Equity • Offers Bonus • 10% Annual Bonus • This range is determined by work location and additional factors, including job-related skills and experience. There may be instances where a salary higher or lower than this range may be appropriate for a candidate whose qualifications differ meaningfully from those listed in the job description. Please note that the compensation details listed on US role postings reflect the base salary only and does not include bonus, equity or benefits. • Upload your resume here to autofill key application fields. • Drop your resume here! • Parsing your resume. Autofilling key fields... • Please Note: we have set up limits for applications for this role. It is in the General Application Limit Setting group. The following limits apply to applications for all jobs within this group: • General Application Limit Setting • Candidates may not apply more than 2 times in any 60 day span for any job in the General Application Limit Setting Group. • Candidates may not re-apply to the same role within 180 days if not presented with an offer • or drag and drop here • The city you currently live in. Start typing and select from the list. • Decline to self-identify • Hispanic or Latino - A person of Cuban, Mexican, Puerto Rican, South or Central American, or other Spanish culture or origin regardless of race. • Hispanic or Latino • White (Not Hispanic or Latino) - A person having origins in any of the original peoples of Europe, the Middle East, or North Africa. • White • Black or African American (Not Hispanic or Latino) - A person having origins in any of the Black racial groups of Africa. • Black or African American • Native Hawaiian or Other Pacific Islander (Not Hispanic or Latino) - A person having origins in any of the peoples of Hawaii, Guam, Samoa, or other Pacific Islands. • Native Hawaiian or Other Pacific Islander • Asian (Not Hispanic or Latino) - A person having origins in any of the original peoples of the Far East, Southeast Asia, or the Indian Subcontinent, including, for example, Cambodia, China, India, Japan, Korea, Malaysia, Pakistan, the Philippine Islands, Thailand, and Vietnam. • Asian • American Indian or Alaska Native (Not Hispanic or Latino) - A person having origins in any of the original peoples of North and South America (including Central America), and who maintain tribal affiliation or community attachment. • American Indian or Alaska Native • Two or More Races (Not Hispanic or Latino) - All persons who identify with more than one of the above five races. • Two or More Races • Hispanic or Latino • White (Not Hispanic or Latino) • Black or African American (Not Hispanic or Latino) • Native Hawaiian or Other Pacific Islander (Not Hispanic or Latino) • Asian (Not Hispanic or Latino) • American Indian or Alaska Native (Not Hispanic or Latino) • Two or More Races (Not Hispanic or Latino) • I identify as one or more of the classifications of protected veteran listed above • I am not a protected veteran
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT