Own Deepgram’s privacy operations, security compliance, audit evidence, control mapping, security questionnaires, policies, and public trust documentation. Lead DPIAs, data-flow mapping, DSAR and deletion workflows, vendor reviews, SOC 2, ISO 27001, and PCI DSS audits. Partner with Engineering, Legal, Research, and Sales Engineering to verify technical claims, automate evidence collection, maintain accurate documentation, and translate privacy and AI regulations into practical requirements and enablement.

Owns Deepgram’s privacy operations program across hosted, dedicated, and self-hosted deployments. Leads privacy risk assessments, DPIAs, transfer impact assessments, data-flow mapping, records of processing, vendor reviews, retention and deletion controls, DSAR workflows, and privacy audits. Translates privacy and AI regulations into engineering and go-to-market requirements, develops operational playbooks and tooling, supports customer reviews, and partners with Legal, Security, Engineering, and Sales Engineering to produce verifiable privacy evidence.

Build and automate security controls across bare-metal Linux infrastructure and AWS. Responsibilities include host hardening, vulnerability and patch management, container and CI/CD security, penetration testing, detection and incident response, access and log reviews, compliance evidence automation, and software supply-chain security. The role also supports customer security work and applies AI tooling to security operations.