Senior Privacy Specialist

Fireworks; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Fireworks seeks a Senior Privacy Specialist to own UK/EU privacy programs, guiding product and engineering while navigating ICO/EU regulator expectations. You’ll drive data subject rights, cross‑border transfers, breach response, and privacy‑by‑design across our growing European footprint.

You’ll lead with hands‑on expertise in UK GDPR, EU GDPR, and the Data Protection Act 2018, collaborating closely with Legal and Security.

Qualifications

• 5–7 years of privacy or data protection experience in tech, SaaS, or cloud.
• Deep knowledge of UK GDPR, EU GDPR, and the Data Protection Act 2018.
• Experience as the sole or primary privacy owner for a region, product, or company; comfortable without a large team.
• Hands-on DPIAs and DSARs, advising product/engineering on privacy‑by‑design.

Responsibilities

• Act as senior privacy contact for UK and EU; correspond with ICO and EU authorities with support from Privacy Lead and Legal.
• Provide regional privacy guidance to product, engineering, GTM and Legal on applicable laws and risk.
• Own UK/EU data subject rights outcomes, deadlines, scope, exemptions, and regional records.
• Own cross‑border transfer compliance: UK IDTA, EU SCCs, adequacy, and TIAs for vendors and intra‑group flows.
• Lead breach assessment and notification for UK/EU; decisions on 72‑hour reporting and post‑incident actions.
• Embed privacy‑by‑design: review products, features, models, and vendors for privacy risk and guidance to teams.
• Partner with AI governance on privacy in model training, fine‑tuning, and inference; data minimization and purpose limitation.
• Keep UK/EU privacy notices and policy library accurate and aligned with obligations.
• Take on additional privacy projects as the program evolves.

Skills

UK GDPR

EU GDPR

Data Protection

DPIAs

DSARs

IDTA/SCCs

Privacy-by-Design

Low-code

Automation

Cross-functional

Policy Guidance

Regulatory Liaison

Tools

OneTrust

TrustArc

Job description

About Us:

Fireworks is the platform for specialized intelligence, enabling companies to build, train, and serve AI models tailored to their own data, workflows, and products. Founded by the team behind PyTorch and backed by AMD, Atreides, Benchmark Capital, Index Ventures, Lightspeed, NVIDIA, Sequoia Capital, and TCV, Fireworks powers production AI with hundreds of state-of-the-art open models across text, image, embedding, audio, and multimodal workloads. Today, Fireworks is a Series D company valued at $17.5 billion, bringing together an ambitious, collaborative team that's building the future of enterprise AI.

About the role

We're hiring a Senior Privacy Specialist to be our privacy presence in the UK and EU as Fireworks scales its European footprint. We've achieved ISO 27001, ISO 27701, ISO 42001, and SOC 2 Type II, and we operate active UK GDPR, EU GDPR, and CCPA programs.

You’ll be our senior privacy point of contact for the UK and EU - the person who fields supervisory authority correspondence and owns the operational processes that keep our UK GDPR, EU GDPR, and Data Protection Act 2018 obligations met. You’ll report to our Privacy Lead and work as part of a small global privacy team, with real autonomy over the UK/EU side of the program.

This is a hands‑on senior individual contributor role, and an advisory one. You’ll be the privacy judgment in the room for the UK and EU: the person engineers, sales, and legal come to before they ship, sign, or answer.

Who this role is for

We’re building a privacy function that punches well above its headcount. That shapes who succeeds here:

• You've operated and built under ambiguity. You’re used to being the one who owns it, and you’ve built structures where none existed rather than inheriting someone else’s.

• You build systems, not queues. You’ve used AI tooling, automation platforms, scripting, or workflow engines to take manual privacy work off the table - and you’re excited to do more of that utilizing cutting‑edge technology.

• You take a project and finish it. You don’t need prescriptive instructions or hand‑holding - you spot what’s broken, scope it, own it until completion, and socialize it within the organization.

• You take extreme ownership. When something in your area goes wrong, you own it, fix it, and make sure it can’t happen the same way twice - without waiting to be asked and without pointing fingers.

What you’ll do

• Act as our senior privacy point of contact for the UK and EU: first line for the ICO and EU supervisory authorities, handling regulator correspondence and inquiries with support from our Privacy Lead and Legal.

• Be the standing privacy advisor for the region: guidance to product, engineering, GTM, and Legal on what UK/EU law permits, where the grey areas are, and what risk you’re recommending we accept.

• Own UK/EU data subject rights outcomes: statutory deadlines, scope and exemption decisions, edge cases, and the regional record.

• Own cross‑border transfer compliance: UK IDTA and Addendum, EU SCCs, adequacy analysis, and Transfer Impact Assessments for vendors, sub‑processors, and intra‑group flows.

• Lead breach assessment and notification for UK/EU: triage, 72‑hour notification decisions, regulator and data subject communications, and post‑incident follow‑through with Security and Legal.

• Embed privacy‑by‑design into how we build: review new products, features, models, and vendors for privacy risk, and give engineering and product teams guidance they can act on.

• Partner with our AI governance work on privacy in model training, fine‑tuning, and inference - data minimization, purpose limitation, customer data handling, and emerging EU AI Act obligations.

• Keep the UK/EU privacy notice and policy library accurate, practical, and aligned to what we actually do and our regulatory obligations.

• Take on additional privacy projects as the program evolves; we’re a growing team with dynamic priorities.

How the role will grow

As the program matures and our European footprint expands, you’ll have the opportunity to:

• Regional ownership - take on privacy for additional jurisdictions as we enter new markets, and shape our approach to emerging regimes.

• Advisory reach - become the privacy voice in the highest‑stakes decisions: new markets, new product categories, regulator engagement, and AI Act readiness.

• Program ownership - take a hand in setting program direction, roadmap, and strategy.

What we’re looking for

• 5-7 years of experience in privacy or data protection, with meaningful time in a tech, SaaS, or cloud company.

• Deep, hands‑on working knowledge of UK GDPR, EU GDPR, and the Data Protection Act 2018 - you’ve been a key player in a program complying with these regimes, not just worked on a small portion of one.

• Experience as the sole or primary privacy owner for a region, product, or company; you’re comfortable without a large team around you.

• Track record running DPIAs and DSARs hands‑on, and advising product and engineering teams on privacy‑by‑design.

• Direct experience with international transfer mechanisms (UK IDTA, SCCs, adequacy, TIAs) and the judgment to apply them to real vendor and architecture decisions.

• Some exposure to a supervisory authority - whether as a DPO, deputy, or otherwise.

• Excellent communication; you work confidently across engineering, legal, sales, and executive audiences, and you can turn regulatory requirements into clear guidance.

• Comfort with low‑code automation and LLM‑based tooling - enough to specify, evaluate, and get hands‑on with the systems that run your program.

• Based in the EU/UK with the right to work in those geographies.

Nice to have

• Privacy certifications (CIPP/E, CIPM, CIPT, FIP).

• Experience with privacy tooling (OneTrust, TrustArc, Transcend, DataGrail, Securiti, or similar) - especially if you’ve pushed one past its out‑of‑the‑box limits.

• Exposure to ISO 42001, AI/ML data governance, model training data considerations, or the EU AI Act.

• Experience standing up a privacy function in‑region at a growth‑stage company.

Why Fireworks?

• Solve Hard Problems: Tackle challenges at the forefront of AI infrastructure, from low‑latency inference to scalable model serving.

• Build What’s Next: Work with bleeding‑edge technology that impacts how businesses and developers harness AI globally.

• Ownership & Impact: Join a fast‑growing, passionate team where your work directly shapes the future of AI—no bureaucracy, just results.

• Learn from the Best: Collaborate with world‑class engineers and AI researchers who thrive on curiosity and innovation.

Fireworks AI is an equal‑opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all innovators.