Aimed at senior data protection professionals who have built privacy programs from scratch and are comfortable with AI tooling and automation.
Derived from job-description analysis by Serendipath's career intelligence engine.
Original posting from Fireworks via Ashby
ABOUT US:
Fireworks is the platform for specialized intelligence, enabling companies to build, train, and serve AI models tailored to their own data, workflows, and products. Founded by the team behind PyTorch and backed by AMD, Atreides, Benchmark Capital, Index Ventures, Lightspeed, NVIDIA, Sequoia Capital, and TCV, Fireworks powers production AI with hundreds of state-of-the-art open models across text, image, embedding, audio, and multimodal workloads. Today, Fireworks is a Series D company valued at $17.5 billion, bringing together an ambitious, collaborative team that's building the future of enterprise AI.
ABOUT THE ROLE
We're hiring a Senior Privacy Specialist to be our privacy presence in the UK and EU as Fireworks scales its European footprint. We've achieved ISO 27001, ISO 27701, ISO 42001, and SOC 2 Type II, and we operate active UK GDPR, EU GDPR, and CCPA programs.
You'll be our senior privacy point of contact for the UK and EU - the person who fields supervisory authority correspondence and owns the operational processes that keep our UK GDPR, EU GDPR, and Data Protection Act 2018 obligations met. You'll report to our Privacy Lead and work as part of a small global privacy team, with real autonomy over the UK/EU side of the program.
This is a hands-on senior individual contributor role, and an advisory one. You'll be the privacy judgment in the room for the UK and EU: the person engineers, sales, and legal come to before they ship, sign, or answer.
WHO THIS ROLE IS FOR
We're building a privacy function that punches well above its headcount. That shapes who succeeds here:
- You've operated and built under ambiguity. You're used to being the one who owns it, and you've built structures where none existed rather than inheriting someone else's.
- You build systems, not queues. You've used AI tooling, automation platforms, scripting, or workflow engines to take manual privacy work off the table - and you're excited to do more of that utilizing cutting-edge technology.
- You take a project and finish it. You don't need prescriptive instructions or hand-holding - you spot what's broken, scope it, own it until completion, and socialize it within the organization.
- You take extreme ownership. When something in your area goes wrong, you own it, fix it, and make sure it can't happen the same way twice - without waiting to be asked and without pointing fingers.
WHAT YOU'LL DO
- Act as our senior privacy point of contact for the UK and EU: first line for the ICO and EU supervisory authorities, handling regulator correspondence and inquiries with support from our Privacy Lead and Legal.
- Be the standing privacy advisor for the region: guidance to product, engineering, GTM, and Legal on what UK/EU law permits, where the grey areas are, and what risk you're recommending we accept.
- Own UK/EU data subject rights outcomes: statutory deadlines, scope and exemption decisions, edge cases, and the regional record.
- Own cross-border transfer compliance: UK IDTA and Addendum, EU SCCs, adequacy analysis, and Transfer Impact Assessments for vendors, sub-processors, and intra-group flows.
- Lead breach assessment and notification for UK/EU: triage, 72-hour notification decisions, regulator and data subject communications, and post-incident follow-through with Security and Legal.
- Embed privacy-by-design into how we build: review new products, features, models, and vendors for privacy risk, and give engineering and product teams guidance they can act on.
- Partner with our AI governance work on privacy in model training, fine-tuning, and inference - data minimization, purpose limitation, customer data handling, and emerging EU AI Act obligations.
- Keep the UK/EU privacy notice and policy library accurate, practical, and aligned to what we actually do and our regulatory obligations.
- Take on additional privacy projects as the program evolves; we're a growing team with dynamic priorities.
HOW THE ROLE WILL GROW
As the program matures and our European footprint expands, you'll have the opportunity to:
- Regional ownership - take on privacy for additional jurisdictions as we enter new markets, and shape our approach to emerging regimes.
- Advisory reach - become the privacy voice in the highest-stakes decisions: new markets, new product categories, regulator engagement, and AI Act readiness.
- Program ownership - take a hand in setting program direction, roadmap, and strategy.
WHAT WE'RE LOOKING FOR
- 5-7 years of experience in privacy or data protection, with meaningful time in a tech, SaaS, or cloud company.
- Deep, hands-on working knowledge of UK GDPR, EU GDPR, and the Data Protection Act 2018 - you've been a key player in a program complying with these regimes, not just worked on a small portion of one.
- Experience as the sole or primary privacy owner for a region, product, or company; you're comfortable without a large team around you.
- Track record running DPIAs and DSARs hands-on, and advising product and engineering teams on privacy-by-design.
- Direct experience with international transfer mechanisms (UK IDTA, SCCs, adequacy, TIAs) and the judgment to apply them to real vendor and architecture decisions.
- Some exposure to a supervisory authority - whether as a DPO, deputy, or otherwise.
- Excellent communication; you work confidently across engineering, legal, sales, and executive audiences, and you can turn regulatory requirements into clear guidance.
- Comfort with low-code automation and LLM-based tooling - enough to specify, evaluate, and get hands-on with the systems that run your program.
- Based in the EU/UK with the right to work in those geographies.
NICE TO HAVE
- Privacy certifications (CIPP/E, CIPM, CIPT, FIP).
- Experience with privacy tooling (OneTrust, TrustArc, Transcend, DataGrail, Securiti, or similar) - especially if you've pushed one past its out-of-the-box limits.
- Exposure to ISO 42001, AI/ML data governance, model training data considerations, or the EU AI Act.
- Experience standing up a privacy function in-region at a growth-stage company.
WHY FIREWORKS?
- Solve Hard Problems: Tackle challenges at the forefront of AI infrastructure, from low-latency inference to scalable model serving.
- Build What’s Next: Work with bleeding-edge technology that impacts how businesses and developers harness AI globally.
- Ownership & Impact: Join a fast-growing, passionate team where your work directly shapes the future of AI—no bureaucracy, just results.
- Learn from the Best: Collaborate with world-class engineers and AI researchers who thrive on curiosity and innovation.
Fireworks AI is an equal-opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all innovators.
Source: Fireworks careers (Ashby)