fireworks - Senior Privacy Specialist
Requirements
• 5-7 years of experience in privacy or data protection, with meaningful time in a tech, SaaS, or cloud company. • Deep, hands-on working knowledge of UK GDPR, EU GDPR, and the Data Protection Act 2018 - you've been a key player in a program complying with these regimes, not just worked on a small portion of one. • Experience as the sole or primary privacy owner for a region, product, or company; you're comfortable without a large team around you. • Track record running DPIAs and DSARs hands-on, and advising product and engineering teams on privacy-by-design. • Direct experience with international transfer mechanisms (UK IDTA, SCCs, adequacy, TIAs) and the judgment to apply them to real vendor and architecture decisions. • Some exposure to a supervisory authority - whether as a DPO, deputy, or otherwise. • Excellent communication; you work confidently across engineering, legal, sales, and executive audiences, and you can turn regulatory requirements into clear guidance. • Comfort with low-code automation and LLM-based tooling - enough to specify, evaluate, and get hands-on with the systems that run your program. • Based in the EU/UK with the right to work in those geographies. • Privacy certifications (CIPP/E, CIPM, CIPT, FIP). • Experience with privacy tooling (OneTrust, TrustArc, Transcend, DataGrail, Securiti, or similar) - especially if you've pushed one past its out-of-the-box limits. • Exposure to ISO 42001, AI/ML data governance, model training data considerations, or the EU AI Act. • Experience standing up a privacy function in-region at a growth-stage company.
Responsibilities
• Act as our senior privacy point of contact for the UK and EU: first line for the ICO and EU supervisory authorities, handling regulator correspondence and inquiries with support from our Privacy Lead and Legal. • Be the standing privacy advisor for the region: guidance to product, engineering, GTM, and Legal on what UK/EU law permits, where the grey areas are, and what risk you're recommending we accept. • Own UK/EU data subject rights outcomes: statutory deadlines, scope and exemption decisions, edge cases, and the regional record. • Own cross-border transfer compliance: UK IDTA and Addendum, EU SCCs, adequacy analysis, and Transfer Impact Assessments for vendors, sub-processors, and intra-group flows. • Lead breach assessment and notification for UK/EU: triage, 72-hour notification decisions, regulator and data subject communications, and post-incident follow-through with Security and Legal. • Embed privacy-by-design into how we build: review new products, features, models, and vendors for privacy risk, and give engineering and product teams guidance they can act on. • Partner with our AI governance work on privacy in model training, fine-tuning, and inference - data minimization, purpose limitation, customer data handling, and emerging EU AI Act obligations. • Keep the UK/EU privacy notice and policy library accurate, practical, and aligned to what we actually do and our regulatory obligations. • Take on additional privacy projects as the program evolves; we're a growing team with dynamic priorities.
Benefits
• Do you have any initial compensation expectations? • To keep your interview experience seamless and distraction-free, we use an AI Notetaker to record and transcribe our interviews. This helps interviewers focus fully on the conversation and ensures your responses are captured accurately. The recording will only be used internally for evaluation. If you would prefer not to be recorded, you can opt out on this page. Opting out will not impact your candidacy in any way. • Yes, I consent to be recorded • Opt out of recording • Decline to self-identify • Hispanic or Latino - A person of Cuban, Mexican, Puerto Rican, South or Central American, or other Spanish culture or origin regardless of race. • Hispanic or Latino • White (Not Hispanic or Latino) - A person having origins in any of the original peoples of Europe, the Middle East, or North Africa. • White • Black or African American (Not Hispanic or Latino) - A person having origins in any of the Black racial groups of Africa. • Black or African American • Native Hawaiian or Other Pacific Islander (Not Hispanic or Latino) - A person having origins in any of the peoples of Hawaii, Guam, Samoa, or other Pacific Islands. • Native Hawaiian or Other Pacific Islander • Asian (Not Hispanic or Latino) - A person having origins in any of the original peoples of the Far East, Southeast Asia, or the Indian Subcontinent, including, for example, Cambodia, China, India, Japan, Korea, Malaysia, Pakistan, the Philippine Islands, Thailand, and Vietnam. • Asian • American Indian or Alaska Native (Not Hispanic or Latino) - A person having origins in any of the original peoples of North and South America (including Central America), and who maintain tribal affiliation or community attachment. • American Indian or Alaska Native • Two or More Races (Not Hispanic or Latino) - All persons who identify with more than one of the above five races. • Two or More Races • Hispanic or Latino • White (Not Hispanic or Latino) • Black or African American (Not Hispanic or Latino) • Native Hawaiian or Other Pacific Islander (Not Hispanic or Latino) • Asian (Not Hispanic or Latino) • American Indian or Alaska Native (Not Hispanic or Latino) • Two or More Races (Not Hispanic or Latino) • I identify as one or more of the classifications of protected veteran listed above • I am not a protected veteran
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT