Head of Privacy

About Nothing

Nothing exists to make tech feel exciting again.

We’re building a different kind of technology company, one that puts design, emotion, and human creativity at the heart of everything we do. From the way our products look and feel to how we communicate and show up in culture, we believe technology should make you feel something.

Founded in London in 2020, we’ve grown from idea to global challenger in just a few years. Backed by GV (Google Ventures), EQT Ventures, and C Ventures, and investors like Tony Fadell (iPod), Casey Neistat, and Kevin Lin (Twitch), we’re now sold in 40+ markets with millions of users worldwide.

About the Team

We are building Essential, the intelligence layer of our OS. We believe AI should be useful and we strive to build systems that are open, honest, and secure by default. The industry treats user data as a commodity to be hoarded. We treat it as a liability to be minimised and protected. Our team sits at the intersection of product ambition and user rights, solving the hard problem of delivering personalised, context-aware experiences without compromising the privacy-by-design principles that define us.

What You'll Do

• Define the long-term roadmap for a dedicated privacy engineering function, including strategy for team growth and investment.

• Map the entire data ecosystem across Essential and the OS, covering signals, SDKs, cloud services, and storage, into a single source of truth.

• Drive the engineering backlog to prioritise and close critical security gaps, with a focus on access hygiene, pipeline security, and encryption standards.

• Translate GDPR and global regulatory frameworks into concrete technical specifications, with consent, retention, and deletion logic baked into the codebase.

• Build risk-based guardrails that let product teams ship features fast without bypassing security reviews.

• Work closely with Design and Brand to create transparent privacy controls and prompts that help users understand exactly how their data is used.

• Own relationships with external security specialists and auditors to validate our architecture against global standards and lead incident response when needed.

What We're Looking For

• Deep technical fluency in modern cloud stacks (AWS/GCP), API architectures, and identity management, with the ability to separate real security risks from noise.

• Proven experience applying privacy engineering to live consumer products, with the judgement to know when to call legal and when to make the call yourself.

• A high sense of ownership, with the drive to take ambiguous requirements through to full technical resolution without constant direction.

• A background in privacy engineering, security architecture, or technical product management inside a data-rich consumer tech environment.

• A pragmatic approach to shipping: you prioritise safe, functional products and understand the trade-offs that come with moving fast.

• Clear, direct communication skills. You write documentation that engineers, lawyers, and leadership all understand, and you bring people along without losing the detail.

• A genuine desire to change how the industry handles data, building practices designed to earn trust rather than maximise collection.

How We Work

• Location: London (Kings Cross & Farringdon offices)
• Working Pattern: Full-time, in-office, five days a week. We can work around personal needs where it makes sense, but being together is how we do our best work.
• Commute: We ask that you live within a 60-minute commute of your office.