SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Fireworks is a Series D AI infrastructure platform ($17.5B valuation) that enables companies to build, train, and serve specialized AI models. Founded by the PyTorch team and backed by AMD, Benchmark, Index Ventures, Lightspeed, NVIDIA, and Sequoia, Fireworks powers production AI with hundreds of state-of-the-art open models across text, image, embedding, audio, and multimodal workloads.
You will serve as Fireworks' senior privacy point of contact for the UK and EU as the company scales its European footprint. Reporting to the Privacy Lead, you'll own the operational processes and regulatory compliance that keep UK GDPR, EU GDPR, and Data Protection Act 2018 obligations met. This is a hands-on senior individual contributor role with real autonomy over the UK/EU privacy program.
Key responsibilities include:
- Act as first line for ICO and EU supervisory authority correspondence and inquiries
- Provide standing privacy advisory to product, engineering, GTM, and Legal teams on UK/EU regulatory requirements and risk
- Own UK/EU data subject rights outcomes, including statutory deadlines and exemption decisions
- Manage cross-border transfer compliance (UK IDTA, EU SCCs, adequacy analysis, Transfer Impact Assessments)
- Lead breach assessment and notification for UK/EU, including 72-hour notification decisions and regulator communications
- Embed privacy-by-design into product development through privacy risk reviews and actionable guidance
- Partner on AI governance work, including privacy in model training, fine-tuning, inference, and EU AI Act obligations
- Maintain UK/EU privacy notice and policy library accuracy and alignment with actual operations
- Take on additional privacy projects as the program evolves
The role offers growth opportunities including regional ownership expansion, advisory reach on highest-stakes decisions, and program strategy involvement.
Requirements:
- 5-7 years of privacy or data protection experience in tech, SaaS, or cloud companies
- Deep, hands-on working knowledge of UK GDPR, EU GDPR, and Data Protection Act 2018 as a key player in a compliance program
- Experience as sole or primary privacy owner for a region, product, or company
- Track record running DPIAs and DSARs hands-on and advising on privacy-by-design
- Direct experience with international transfer mechanisms (UK IDTA, SCCs, adequacy, TIAs)
- Some exposure to a supervisory authority (as DPO, deputy, or similar)
- Excellent communication across engineering, legal, sales, and executive audiences
- Comfort with low-code automation and LLM-based tooling
- Based in EU/UK with right to work in those geographies
Nice to have:
- Privacy certifications (CIPP/E, CIPM, CIPT, FIP)
- Experience with privacy tooling (OneTrust, TrustArc, Transcend, DataGrail, Securiti)
- Exposure to ISO 42001, AI/ML data governance, model training data, or EU AI Act
- Experience standing up privacy function in-region at growth-stage company
