Senior Privacy & Security Compliance Lead

Apply; Northern (KY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Deepgram is seeking a Compliance and Documentation Lead to own the privacy and security compliance program, including DPIAs, data flow maps, and retention workflows. You will develop evidence for auditors, customers, and engineers while coordinating with Legal and Security Engineering.

You’ll navigate GDPR/UK GDPR, CCPA/CPRA, and AI regulation, ensuring concrete, testable requirements and reusable materials across deployments from hosted to self-hosted.

Qualifications

• Extensive privacy operations, GRC, or technical compliance experience.
• Exceptional writing ability to document complex controls clearly.
• Experience producing audit evidence end to end (SOC 2, ISO 27001, PCI DSS).
• Ability to map privacy requirements to concrete engineering actions.
• Familiarity with GDPR/CCPA and evolving AI regulation.

Responsibilities

• Own privacy risk assessments, DPIAs, and vendor due diligence.
• Build and maintain data flow maps and processing records across deployments.
• Own retention, deletion, DSAR workflows, and consent handling.
• Own subprocessor reviews and DPAs; align with legal on transfer mechanisms.
• Translate privacy laws into concrete requirements for GTM teams.
• Own audit evidence for SOC 2, ISO 27001, PCI DSS and related questionnaires.

Skills

Privacy operations

Exceptional writer

Compliance systems ownership

Audit involvement

GDPR/CCPA/US privacy laws

Technical fluency

Startup-friendly judgment

Documentation systems

Ambiguity tolerance

Tools

Vanta

Drata

Trust Center tooling

Job description

Deepgram is seeking a Compliance and Documentation Lead to own the privacy and security compliance program, including DPIAs, data flow maps, and retention workflows. You will develop evidence for auditors, customers, and engineers while coordinating with Legal and Security Engineering.

You’ll navigate GDPR/UK GDPR, CCPA/CPRA, and AI regulation, ensuring concrete, testable requirements and reusable materials across deployments from hosted to self-hosted.