A fast-growing organisation in the AI Cloud Infrastructure space is looking for a Senior Security Engineer specialising in Privacy & Data Security to strengthen its global security and privacy capabilities. This role will support the delivery of cloud infrastructure across international markets, with a strong focus on data protection, privacy compliance, and the technical safeguards required for enterprise customers and regulatory obligations.
Role
You will work at the intersection of cybersecurity, privacy engineering, cloud infrastructure, and compliance. The role involves designing practical security controls for data throughout its lifecycle, including encryption, key management, data discovery, access controls, data protection, retention and deletion, and cross-border data transfers. You will also partner with Legal, Risk & Compliance, DPO, infrastructure security teams, auditors, and customers to translate regulatory requirements into implementable controls, maintain technical and organisational measures, and provide clear evidence for audits and customer due diligence.
Requirements
- 5-8 years of hands-on experience in security, data security, or a related engineering function, with practical expertise in encryption, KMS/HSM, and cloud security.
- Strong understanding of privacy engineering concepts, including data-flow mapping, personal-data discovery, DSAR implementation, data minimisation, de-identification, and Privacy by Design.
- Ability to interpret GDPR requirements and translate them into technical controls, TOMs, and security measures, with familiarity in SCC Annex II and DPA security documentation.
- Solid understanding of cloud and Kubernetes environments, including multi-tenant isolation, data flows, and integration with security tooling; with demonstrated ownership of at least one end-to-end privacy or GDPR/DPA compliance implementation.
- Excellent written and verbal communication skills, with the ability to work effectively across engineering, legal, compliance, audit, and customer-facing stakeholders; experience with SOC 2, ISO 27001/27701, compliance automation, or relevant privacy/security certifications would be advantageous.