Define the privacy engineering roadmap, manage data ecosystems, prioritize security gaps, translate GDPR, and build user-focused privacy controls.
About Nothing
Nothing exists to make tech feel exciting again.
We’re building a different kind of technology company, one that puts design, emotion, and human creativity at the heart of everything we do. From the way our products look and feel to how we communicate and show up in culture, we believe technology should make you feel something.
Founded in London in 2020, we’ve grown from idea to global challenger in just a few years. Backed by GV (Google Ventures), EQT Ventures, and C Ventures, and investors like Tony Fadell (iPod), Casey Neistat, and Kevin Lin (Twitch), we’re now sold in 40+ markets with millions of users worldwide.
About the Team
We're building Essential, the intelligence layer of our OS. Most of the industry treats your data like oil: something to extract, refine and sell. We think that's backwards. Data is a liability we're trusted to minimise and protect, not a resource to hoard. This team sits right at the point where product ambition meets user rights, working out how to build context-aware, genuinely useful AI without quietly compromising on privacy to get there.
What You'll Do- Drive the engineering backlog to close critical security gaps: access hygiene, pipeline security and encryption standards
- Translate GDPR and global regulatory frameworks into technical specs, with consent, retention and deletion logic built straight into the codebase
- Track and map personal and protected data flows across Essential and the OS, assigning risk levels as part of the company's wider data ecosystem picture
- Build risk-based guardrails that let product teams ship fast without skipping security review
- Partner with Design and Brand to build privacy controls and prompts that actually help people understand how their data gets used
- Own our relationships with external security specialists and auditors, and lead incident response when it counts
- Contribute to the long-term shape of privacy engineering at Nothing, working alongside Legal and external specialist consultants rather than building this in isolation
- Deep technical fluency across modern cloud stacks (AWS/GCP), API architectures and identity management, with the judgement to separate real risk from noise
- A track record of applying privacy engineering to live, data-rich consumer products, not just policy on paper
- A high bar for ownership. You take ambiguous problems through to full technical resolution without needing to be told what's next
- A background in privacy engineering, security architecture or technical product management, built inside a data-rich consumer tech environment
- Sound judgement on when to loop in legal and when to make the call yourself
- Direct, clear communication. You write documentation that engineers, lawyers and leadership can all pick up and act on
- A genuine drive to change how this industry handles data, building practices designed to earn trust rather than maximise collection
- Location: London (Kings Cross & Farringdon offices)
- Working Pattern: Full-time, in-office, five days a week. We can work around personal needs where it makes sense, but being together is how we do our best work.
- Commute: We ask that you live within a 60-minute commute of your office.
Similar Jobs
Artificial Intelligence • Fintech • Greentech • Sales • Software • Travel • Hospitality
Lead and scale Perk's global privacy program and AI governance, drive privacy-by-design across product and operations, manage privacy controls and tooling, oversee vendor/privacy risk, advise executives on privacy and AI risks, and manage a small team to deliver operational, compliance, and customer-trust outcomes.
Top Skills:
ClaudeGeminiIso 23894Iso 27001Iso 27701Iso 42001LlmsNist Ai Risk Management FrameworkNist Privacy FrameworkPrivacy-Enhancing Technologies (Pet)Soc 2
Insurance
Lead global privacy strategy, ensure compliance with various data protection laws, manage data privacy issues, and collaborate across teams on governance.
Top Skills:
CcpaCpraData Processing AgreementsData Protection Impact AssessmentsData Protection LawGdprHipaaPipa
.png){kind=logo}
AdTech • Cloud • Digital Media • Information Technology • News + Entertainment • App development
Support specification, design review, production, installation, testing, and commissioning of ride and show action equipment. Provide engineering calculations, drafting, test protocol development, vendor management, and technical review to ensure successful delivery and safety compliance.
What you need to know about the London Tech Scene
London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.
