Senior Technical Program Manager, International Security & Privacy Compliance

Coreweaveu

Greater London

On-site

GBP 90,000 - 130,000

Full time

5 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

Family-level Medical Insurance

Family-level Dental Insurance

Generous Pension Contribution

Life Assurance at 4x Salary

Critical Illness Cover

Employee Assistance Programme

Tuition Reimbursement

Work culture focused on innovative dis

Job summary

CoreWeave is seeking a Technical Program Manager for International Security & Privacy Compliance to lead launch-country programs from regulatory assessment to go-live. You will translate local laws into technical and operational requirements and coordinate Legal, Privacy, Security, Data Centre Operations, Product, and Go-to-Market to deliver compliant market entry.

Based in London, you will collaborate with US teams and teams across the Middle East and Asia-Pacific, building repeatable

Qualifications

5+ years of international security and privacy compliance program management experience.
Proven track record managing end-to-end, cross-functional programs with high impact.
Strong execution, risk management, and stakeholder communication skills.
Solid grounding in ISO/IEC 27001, ISO/IEC 27701, SOC 2, NIST CSF, and GDPR-like regimes.

Responsibilities

Own the end-to-end compliance program for new-country launches from regulatory assessment through go-live and upkeep.
Translate local laws into concrete technical and operational requirements with Legal and Privacy counsel.
Map country requirements to CoreWeave's control framework and drive gaps to closure with security, engineering, and data centre teams.
Build and maintain project plans, requirements registers, and dependency maps for each market.
Develop country-specific incident and breach obligations into the incident response process before go-live.
Identify risks and blockers early and drive resolution with clear options for leadership.
Coordinate privacy reviews and data protection assessments for in-country services with Privacy and Product.
Incorporate compliance into product and data centre launch plans and customer-facing commitments.

Skills

International compliance

GRC

Cross-functional leadership

ISO 27001

ISO 27701

SOC 2

NIST CSF

GDPR

Data protection

Cloud / infrastructure

Education

CIPP/E

CIPM

CISSP

CISM

CISA

PMP

Tools

Jira

Job description

CoreWeave is The Essential Cloud for AI™. Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at www.coreweave.com.

We're proud to be a Living Wage accredited Employer.

About the Role

CoreWeave is taking its AI cloud and data centre services to new countries. Each new market brings its own data protection, cybersecurity, and data residency requirements, and we have to meet them before we launch.

As the Technical Program Manager for International Security & Privacy Compliance, you will own the program that gets CoreWeave compliant in each new market. You will turn local legal and regulatory requirements into controls, timelines, and owners. Then you will lead Legal, Privacy, Security, Data Centre Operations, Product, and Go-to-Market through to a compliant launch. The problem is defined; the solution is not. You will build the playbook as you go and make it repeatable for each market that follows.

The role is based in London so you can work during business hours with US teams and with teams in the Middle East and Asia-Pacific.

What You'll Do

Own the end-to-end compliance program for new-country launches, from early regulatory assessment through go-live and ongoing upkeep.
Work with Legal and Privacy counsel to turn local laws into concrete technical and operational requirements. These cover data protection and privacy, cybersecurity, data localization and residency, cross-border data transfer, incident reporting, and registration or licensing. Legal owns the interpretation; you own turning it into delivery.
Map country requirements to CoreWeave's existing control framework (SOC 2, ISO/IEC 27001, and related certifications). Find gaps and drive the work to close them with control owners in Security, Engineering, and Data Centre Operations.
Build and maintain source-of-truth program plans, a requirements register, and a dependency map for each market. Use them to drive high-quality execution against timelines leadership can rely on.
Build country-specific incident and breach notification obligations into CoreWeave's incident response process before go-live.
Find risks and blockers early, such as data residency limits on architecture, local vendor or partner obligations, and regulator timelines. Drive them to resolution across teams, or elevate them with clear options and tradeoffs.
Coordinate privacy reviews and data protection impact assessments for in-country services, working with Privacy and Product.
Bring compliance requirements into product and Data Centre launch plans early, so customer‑facing commitments, contracts, and Trust Centre content reflect what we can actually deliver.
Report program status, risk, and decisions needed to Security, Legal, and business leadership.
Make the work repeatable. Turn each market's lessons into a scalable country‑entry playbook, templates, and workflows in Jira and our GRC tooling.

Who You Are

[5+] years of relevant experience in international security and privacy compliance program management, GRC, or related technical program management, preferably at a cloud, data centre, or infrastructure provider.
A track record of managing end-to-end, large‑scale, cross‑functional programs with significant organizational impact under little or no supervision. You are comfortable with work that has a defined problem but no defined solution.
Strong execution skills. You get things done to high quality on timelines people can trust.
You identify risks and blockers early and drive them to resolution.
A solid grounding in industry best practices and frameworks such as ISO/IEC 27001, ISO/IEC 27701, SOC 2, NIST CSF, and GDPR‑style data protection regimes. You can make well‑reasoned decisions and tradeoffs that fit CoreWeave's context.
You quickly learn and keep up with the requirements of unfamiliar jurisdictions, well enough to take an active part in decisions with Legal, Security, and Engineering.
You use feedback to shape priorities, and you make sure compliance solutions don't degrade the customer experience.
You influence cross‑functional decisions with a structured approach, data, and technical insight, to achieve the intended outcome. You also contribute to the wider CoreWeave community, for example by mentoring others.
You win buy‑in from critical stakeholders on your recommendations, define clear communication strategies tailored to the audience, from engineers to executives, and seek out feedback to improve how you work.

Preferred

Experience running compliance programs across several countries, especially in Asia-Pacific or the Middle East.
Experience with data residency, sovereign cloud, or in‑country hosting requirements for cloud or data centre services.
Certifications such as CIPP/E, CIPM, CISSP, CISM, CISA, or PMP.
Experience with GRC platforms and with Jira‑based program tracking.

Wondering if you're a good fit? We believe in investing in our people and value candidates who bring unique backgrounds, even if you don't check every box. Here are a few qualities we've found make someone successful on our team. If some of this describes you, we'd love to talk.

You're comfortable balancing compliance rigor with practical, scalable solutions.
You take ownership, bring structure to ambiguity, and follow issues through to resolution.
You communicate clearly with technical and non‑technical stakeholders and build strong cross‑functional partnerships.
You're energized by building processes and systems that improve how teams work.

What We Offer

In addition to a competitive salary, we offer a variety of benefits to support your needs, including: