Head of Privacy

About Nothing

Nothing exists to make tech feel exciting again.

We’re building a different kind of technology company, one that puts design, emotion, and human creativity at the heart of everything we do. From the way our products look and feel to how we communicate and show up in culture, we believe technology should make you feel something.

Founded in London in 2020, we’ve grown from idea to global challenger in just a few years. Backed by GV (Google Ventures), EQT Ventures, and C Ventures, and investors like Tony Fadell (iPod), Casey Neistat, and Kevin Lin (Twitch), we’re now sold in 40+ markets with millions of users worldwide.

About the Team

We're building Essential, the intelligence layer of our OS. Most of the industry treats your data like oil: something to extract, refine and sell. We think that's backwards. Data is a liability we're trusted to minimise and protect, not a resource to hoard. This team sits right at the point where product ambition meets user rights, working out how to build context-aware, genuinely useful AI without quietly compromising on privacy to get there.

What You'll Do

Drive the engineering backlog to close critical security gaps: access hygiene, pipeline security and encryption standards

Translate GDPR and global regulatory frameworks into technical specs, with consent, retention and deletion logic built straight into the codebase

Track and map personal and protected data flows across Essential and the OS, assigning risk levels as part of the company's wider data ecosystem picture

Build risk-based guardrails that let product teams ship fast without skipping security review

Partner with Design and Brand to build privacy controls and prompts that actually help people understand how their data gets used

Own our relationships with external security specialists and auditors, and lead incident response when it counts

Contribute to the long-term shape of privacy engineering at Nothing, working alongside Legal and external specialist consultants rather than building this in isolation

What We're Looking For

Deep technical fluency across modern cloud stacks (AWS/GCP), API architectures and identity management, with the judgement to separate real risk from noise

A track record of applying privacy engineering to live, data-rich consumer products, not just policy on paper

A high bar for ownership. You take ambiguous problems through to full technical resolution without needing to be told what's next

A background in privacy engineering, security architecture or technical product management, built inside a data-rich consumer tech environment

Sound judgement on when to loop in legal and when to make the call yourself

Direct, clear communication. You write documentation that engineers, lawyers and leadership can all pick up and act on

A genuine drive to change how this industry handles data, building practices designed to earn trust rather than maximise collection

How We Work

Location: London (Kings Cross & Farringdon offices)

Working Pattern: Full-time, in-office, five days a week. We can work around personal needs where it makes sense, but being together is how we do our best work.

Commute: We ask that you live within a 60-minute commute of your office.