At a glance
- Employment
- Full-time
- Workplace
- Remote
- Location
- Remote
About Deepgram
- Deepgram builds foundational voice AI — speech-to-text, text-to-speech, and voice agent infrastructure — used by enterprises and developers to build production voice applications at scale. Our models are trained and served on our own infrastructure, and we offer hosted, dedicated single-tenant, and self-hosted deployment options so customers can meet their own data residency and retention requirements. Learn more at deepgram.com http://deepgram.com.
About the role
- The Privacy Operations Lead will own the operational backbone of Deepgram's privacy program, managing data flow maps, assessment templates, and privacy playbooks.
- This role serves as the technical voice in enterprise customer privacy reviews and partners with Legal, Engineering, and Sales Engineering to ensure privacy claims are repeatable and verifiable.
- The position focuses on designing and operating processes and tooling for privacy controls rather than traditional policy writing.
Responsibilities
- Own customer and prospect privacy risk assessments, DPIAs, and transfer impact assessments end to end.
- Build and maintain accurate data flow maps and records of processing across hosted, dedicated, and self-hosted deployments.
- Translate privacy laws and emerging AI regulations into concrete requirements for engineering and GTM teams.
- Define privacy requirements for product and infrastructure changes, including retention, logging, and training-data lineage.
- Own the operating model for privacy controls such as DSAR workflows, consent handling, and de-identification.
- Design and run operational auditing and remediation workflows to prevent drift between privacy claims and actual practices.
- Manage the subprocessor and vendor privacy review process for colocation and infrastructure providers.
- Develop privacy enablement materials including playbooks and self-service guidance for internal teams.
- Partner with Legal on DPAs, SCCs, transfer mechanisms, and residency commitments.
- Collaborate with Security to ensure privacy and security evidence (SOC 2, ISO 27001, PCI DSS) are produced and reused efficiently.
Requirements
- Substantial experience in privacy operations, legal operations, or technical privacy and compliance.
- Demonstrated ownership of privacy operational systems at scale, such as data maps, DSAR workflows, or consent management.
- Technical fluency to read architecture diagrams, follow data flows, and understand log lines and retention settings.
- Practical, applied experience with GDPR and CCPA/CPRA.
- Current knowledge of emerging AI regulation.
- Ability to communicate effectively with Fortune 500 privacy teams or DPOs.
- Clear writing skills for producing documentation for customers, auditors, and engineers.
- Strong bias toward automating and documenting work processes.
- Comfortable with ambiguity and making defensible decisions when the law is unsettled.
Preferred qualifications
- CIPM, CIPT, CIPP/E, or equivalent certification.
- Comfort reading code (Python, Go, Rust, or TypeScript), writing SQL, or scripting tooling.
- Familiarity with on-premise or colocation infrastructure, containerized (Docker) workloads, and data residency.
- AWS familiarity.
- Experience with ML/AI data pipelines and training-data governance.
- Privacy work in a hybrid model (multi-tenant SaaS alongside self-hosted or on-premise deployments).
- Exposure to formal audits: SOC 2, ISO 27001, HIPAA, PCI DSS.
Workplace
- Role is remote within the USA.
Skills
- GDPR
- CCPA
- CPRA
- EU AI Act
- Python
- Go
- Rust
- TypeScript
- SQL
- Docker
- AWS
- SOC 2
Show all 15 skills
- ISO 27001
- HIPAA
- PCI DSS
