Privacy SpecialistActive

Fireworks AI
Apply now

The opportunity

We're hiring a Senior Privacy Specialist to be our privacy presence in the UK and EU as Fireworks scales its European footprint. We've achieved ISO 27001, ISO 27701, ISO 42001, and SOC 2 Type II, and we operate active UK GDPR, EU GDPR, and CCPA programs.

What you'll do

  • Act as our senior privacy point of contact for the UK and EU: first line for the ICO and EU supervisory authorities, handling regulator correspondence and inquiries with support from our Privacy Lead and Legal.

  • Be the standing privacy advisor for the region: guidance to product, engineering, GTM, and Legal on what UK/EU law permits, where the grey areas are, and what risk you're recommending we accept.

  • Own UK/EU data subject rights outcomes: statutory deadlines, scope and exemption decisions, edge cases, and the regional record.

  • Own cross-border transfer compliance: UK IDTA and Addendum, EU SCCs, adequacy analysis, and Transfer Impact Assessments for vendors, sub-processors, and intra-group flows.

  • Lead breach assessment and notification for UK/EU: triage, 72-hour notification decisions, regulator and data subject communications, and post-incident follow-through with Security and Legal.

  • Embed privacy-by-design into how we build: review new products, features, models, and vendors for privacy risk, and give engineering and product teams guidance they can act on.

What they're looking for

  • years of experience in privacy or data protection, with meaningful time in a tech, SaaS, or cloud company.
  • Deep, hands-on working knowledge of UK GDPR, EU GDPR, and the Data Protection: Act 2018 - you've been a key player in a program complying with these regimes, not just worked on a small portion of one.
  • Experience as the sole or primary privacy owner for a region, product, or: company; you're comfortable without a large team around you.
  • Track record running DPIAs and DSARs hands-on, and advising product and: engineering teams on privacy-by-design.
  • Direct experience with international transfer mechanisms (UK IDTA, SCCs,: adequacy, TIAs) and the judgment to apply them to real vendor and architecture decisions.
  • Some exposure to a supervisory authority: whether as a DPO, deputy, or otherwise.
  • Excellent communication; you work confidently across engineering, legal,: sales, and executive audiences, and you can turn regulatory requirements into clear guidance.
  • Comfort with low-code automation and LLM-based tooling: enough to specify, evaluate, and get hands-on with the systems that run your program.