Senior Privacy Specialist

Skills

About the Role

You will serve as the senior privacy contact for the UK and EU, handle regulator correspondence, advise on privacy risk, and own regional data-subject-rights outcomes. You will manage cross-border transfers, breach assessments, privacy-by-design reviews, AI data governance, and regional privacy notices and policies.

Requirements

• 5–7 years of privacy or data-protection experience in a tech, SaaS, or cloud company
• Deep working knowledge of UK GDPR, EU GDPR, and the Data Protection Act 2018
• Experience as a primary privacy owner for a region, product, or company
• Experience running DPIAs and DSARs and advising on privacy-by-design
• Experience with UK IDTA, SCCs, adequacy, and Transfer Impact Assessments
• Exposure to a supervisory authority
• Excellent cross-functional communication
• Comfort with low-code automation and LLM-based tooling
• Based in the EU or UK with the right to work there

Responsibilities

• Handle correspondence and inquiries from UK and EU supervisory authorities
• Advise product, engineering, GTM, and Legal on UK and EU privacy requirements and risk
• Own UK/EU data subject rights outcomes
• Manage cross-border transfer compliance, including UK IDTA, SCCs, adequacy analysis, and TIAs
• Lead UK/EU breach assessment and notification
• Review products, features, models, and vendors for privacy risk
• Partner on privacy in model training, fine-tuning, and inference
• Maintain UK/EU privacy notices and policy documentation
• Take on evolving privacy projects