Senior Privacy Specialist

Fireworks AI; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Fireworks AI is seeking a Senior Privacy Specialist to own the UK/EU privacy program as we scale our European footprint. You will be the privacy point of contact for regulators and internal partners, guiding product and engineering on compliance, data subject rights, and cross-border data transfers.

You will lead DPIAs/DSARs hands-on, drive privacy-by-design across new products, and collaborate across Legal, Security, and AI governance. Based in the UK/EU with the right to work.

Qualifications

• 5-7 years of experience in privacy or data protection.
• Deep, hands-on knowledge of UK GDPR, EU GDPR, and the Data Protection Act 2018.
• Experience as sole or primary privacy owner for a region, product, or company.
• Track record running DPIAs and DSARs hands-on; advise product/engineering on privacy-by-design.
• Direct experience with international transfer mechanisms (UK IDTA, SCCs, adequacy, TIAs).
• Some exposure to a supervisory authority.
• Excellent communication; ability to translate regulatory requirements into clear guidance.
• Comfort with low-code automation and LLM-based tooling.
• Based in the EU/UK with the right to work in those geographies.

Responsibilities

• Act as senior privacy contact for UK/EU; handle regulator correspondence with support from Legal.
• Provide privacy guidance to product, engineering, GTM, and Legal on what UK/EU law permits.
• Own UK/EU data subject rights outcomes and regional record.
• Own cross-border transfer compliance (UK IDTA, SCCs, TIAs).
• Lead breach assessment and 72-hour notification decisions; post-incident follow-through with Security and Legal.
• Embed privacy-by-design into new products, features, and vendors; provide actionable guidance to teams.
• Partner with AI governance on privacy in model training, fine-tuning, and inference.
• Keep UK/EU privacy notice and policy library accurate and practical.
• Take on additional privacy projects as the program evolves; grow with the team.

Skills

UK GDPR knowledge

DPIAs & DSARs

Privacy program owner

Regulatory engagement

Low-code automation

LLM tooling

Communication skills

Cross-functional work

EU/UK regional work

Tools

OneTrust

TrustArc

Transcend

DataGrail

Securiti

Job description

About Us:

Fireworks is the platform for specialized intelligence, enabling companies to build, train, and serve AI models tailored to their own data, workflows, and products. Founded by the team behind PyTorch and backed by AMD, Atreides, Benchmark Capital, Index Ventures, Lightspeed, NVIDIA, Sequoia Capital, and TCV, Fireworks powers production AI with hundreds of state-of-the-art open models across text, image, embedding, audio, and multimodal workloads. Today, Fireworks is a Series D company valued at $17.5 billion, bringing together an ambitious, collaborative team that's building the future of enterprise AI.

About the role

We're hiring a Senior Privacy Specialist to be our privacy presence in the UK and EU as Fireworks scales its European footprint. We've achieved ISO 27001, ISO 27701, ISO 42001, and SOC 2 Type II, and we operate active UK GDPR, EU GDPR, and CCPA programs.

You’ll be our senior privacy point of contact for the UK and EU - the person who fields supervisory authority correspondence and owns the operational processes that keep our UK GDPR, EU GDPR, and Data Protection Act 2018 obligations met. You’ll report to our Privacy Lead and work as part of a small global privacy team, with real autonomy over the UK/EU side of the program.

This is a hands‑on senior individual contributor role, and an advisory one. You’ll be the privacy judgment in the room for the UK and EU: the person engineers, sales, and legal come to before they ship, sign, or answer.

Who this role is for

We’re building a privacy function that punches well above its headcount. That shapes who succeeds here:

• You've operated and built under ambiguity. You’re used to being the one who owns it, and you’ve built structures where none existed rather than inheriting someone else’s.

• You build systems, not queues. You’ve used AI tooling, automation platforms, scripting, or workflow engines to take manual privacy work off the table - and you’re excited to do more of that utilizing cutting‑edge technology.

• You take a project and finish it. You don’t need prescriptive instructions or hand‑holding - you spot what’s broken, scope it, own it until completion, and socialize it within the organization.

• You take extreme ownership. When something in your area goes wrong, you own it, fix it, and make sure it can’t happen the same way twice - without waiting to be asked and without pointing fingers.

What you’ll do

• Act as our senior privacy point of contact for the UK and EU: first line for the ICO and EU supervisory authorities, handling regulator correspondence and inquiries with support from our Privacy Lead and Legal.

• Be the standing privacy advisor for the region: guidance to product, engineering, GTM, and Legal on what UK/EU law permits, where the grey areas are, and what risk you’re recommending we accept.

• Own UK/EU data subject rights outcomes: statutory deadlines, scope and exemption decisions, edge cases, and the regional record.

• Own cross‑border transfer compliance: UK IDTA and Addendum, EU SCCs, adequacy analysis, and Transfer Impact Assessments for vendors, sub‑processors, and intra‑group flows.

• Lead breach assessment and notification for UK/EU: triage, 72‑hour notification decisions, regulator and data subject communications, and post‑incident follow‑through with Security and Legal.

• Embed privacy‑by‑design into how we build: review new products, features, models, and vendors for privacy risk, and give engineering and product teams guidance they can act on.

• Partner with our AI governance work on privacy in model training, fine‑tuning, and inference - data minimization, purpose limitation, customer data handling, and emerging EU AI Act obligations.

• Keep the UK/EU privacy notice and policy library accurate, practical, and aligned to what we actually do and our regulatory obligations.

• Take on additional privacy projects as the program evolves; we’re a growing team with dynamic priorities.

How the role will grow

As the program matures and our European footprint expands, you’ll have the opportunity to:

• Regional ownership - take on privacy for additional jurisdictions as we enter new markets, and shape our approach to emerging regimes.

• Advisory reach - become the privacy voice in the highest‑stakes decisions: new markets, new product categories, regulator engagement, and AI Act readiness.

• Program ownership - take a hand in setting program direction, roadmap, and strategy.

What we’re looking for

• 5-7 years of experience in privacy or data protection, with meaningful time in a tech, SaaS, or cloud company.

• Deep, hands‑on working knowledge of UK GDPR, EU GDPR, and the Data Protection Act 2018 - you’ve been a key player in a program complying with these regimes, not just worked on a small portion of one.

• Experience as the sole or primary privacy owner for a region, product, or company; you’re comfortable without a large team around you.

• Track record running DPIAs and DSARs hands‑on, and advising product and engineering teams on privacy‑by‑design.

• Direct experience with international transfer mechanisms (UK IDTA, SCCs, adequacy, TIAs) and the judgment to apply them to real vendor and architecture decisions.

• Some exposure to a supervisory authority - whether as a DPO, deputy, or otherwise.

• Excellent communication; you work confidently across engineering, legal, sales, and executive audiences, and you can turn regulatory requirements into clear guidance.

• Comfort with low‑code automation and LLM‑based tooling - enough to specify, evaluate, and get hands‑on with the systems that run your program.

• Based in the EU/UK with the right to work in those geographies.

Nice to have

• Privacy certifications (CIPP/E, CIPM, CIPT, FIP).

• Experience with privacy tooling (OneTrust, TrustArc, Transcend, DataGrail, Securiti, or similar) - especially if you’ve pushed one past its out‑of‑the‑box limits.

• Exposure to ISO 42001, AI/ML data governance, model training data considerations, or the EU AI Act.

• Experience standing up a privacy function in‑region at a growth‑stage company.

Why Fireworks?

• Solve Hard Problems: Tackle challenges at the forefront of AI infrastructure, from low‑latency inference to scalable model serving.

• Build What’s Next: Work with bleeding‑edge technology that impacts how businesses and developers harness AI globally.

• Ownership & Impact: Join a fast‑growing, passionate team where your work directly shapes the future of AI—no bureaucracy, just results.

• Learn from the Best: Collaborate with world‑class engineers and AI researchers who thrive on curiosity and innovation.

Fireworks AI is an equal‑opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all innovators.