Senior Privacy Specialist

Fireworks is the platform for specialized intelligence, enabling companies to build, train, and serve AI models tailored to their own data, workflows, and products. Founded by the team behind PyTorch and backed by AMD, Atreides, Benchmark Capital, Index Ventures, Lightspeed, NVIDIA, Sequoia Capital, and TCV, Fireworks powers production AI with hundreds of state-of-the-art open models across text, image, embedding, audio, and multimodal workloads.

Today, Fireworks is a Series D company valued at $17.5 billion, bringing together an ambitious, collaborative team that's building the future of enterprise AI.

We're hiring a Senior Privacy Specialist to be our privacy presence in the UK and EU as Fireworks scales its European footprint. We've achieved ISO 27001, ISO 27701, ISO 42001, and SOC 2 Type II, and we operate active UK GDPR, EU GDPR, and CCPA programs.

You’ll be our senior privacy point of contact for the UK and EU - the person who fields supervisory authority correspondence and owns the operational processes that keep our UK GDPR, EU GDPR, and Data Protection Act 2018 obligations met. You’ll report to our Privacy Lead and work as part of a small global privacy team, with real autonomy over the UK/EU side of the program.

This is a hands‑on senior individual contributor role, and an advisory one. You’ll be the privacy judgment in the room for the UK and EU: the person engineers, sales, and legal come to before they ship, sign, or answer.

We’re building a privacy function that punches well above its headcount. That shapes who succeeds here:

• You've operated and built under ambiguity. You’re used to being the one who owns it, and you’ve built structures where none existed rather than inheriting someone else’s.

• You build systems, not queues. You’ve used AI tooling, automation platforms, scripting, or workflow engines to take manual privacy work off the table - and you’re excited to do more of that utilizing cutting‑edge technology.

• You take a project and finish it. You don’t need prescriptive instructions or hand‑holding - you spot what’s broken, scope it, own it until completion, and socialize it within the organization.

• You take extreme ownership. When something in your area goes wrong, you own it, fix it, and make sure it can’t happen the same way twice - without waiting to be asked and without pointing fingers.

• Act as our senior privacy point of contact for the UK and EU: first line for the ICO and EU supervisory authorities, handling regulator correspondence and inquiries with support from our Privacy Lead and Legal.

• Be the standing privacy advisor for the region: guidance to product, engineering, GTM, and Legal on what UK/EU law permits, where the grey areas are, and what risk you’re recommending we accept.

• Own UK/EU data subject rights outcomes: statutory deadlines, scope and exemption decisions, edge cases, and the regional record.

• Own cross‑border transfer compliance: UK IDTA and Addendum, EU SCCs, adequacy analysis, and Transfer Impact Assessments for vendors, sub‑processors, and intra‑group flows.

• Lead breach assessment and notification for UK/EU: triage, 72‑hour notification decisions, regulator and data subject communications, and post‑incident follow‑through with Security and Legal.

• Embed privacy‑by‑design into how we build: review new products, features, models, and vendors for privacy risk, and give engineering and product teams guidance they can act on.

• Partner with our AI governance work on privacy in model training, fine‑tuning, and inference - data minimization, purpose limitation, customer data handling, and emerging EU AI Act obligations.

• Keep the UK/EU privacy notice and policy library accurate, practical, and aligned to…