Head of Privacy

About this role

About Nothing

Nothing exists to make tech feel exciting again.

We’re building a different kind of technology company, one that puts design, emotion, and human creativity at the heart of everything we do. From the way our products look and feel to how we communicate and show up in culture, we believe technology should make you feel something.

Founded in London in 2020, we’ve grown from idea to global challenger in just a few years. Backed by GV (Google Ventures), EQT Ventures, and C Ventures, and investors like Tony Fadell (iPod), Casey Neistat, and Kevin Lin (Twitch), we’re now sold in 40+ markets with millions of users worldwide.

About the Team

We are building Essential, the intelligence layer of our OS. We believe AI should be useful and we strive to build systems that are open, honest, and secure by default. The industry treats user data as a commodity to be hoarded. We treat it as a liability to be minimised and protected. Our team sits at the intersection of product ambition and user rights, solving the hard problem of delivering personalised, context-aware experiences without compromising the privacy-by-design principles that define us.

What You'll Do

•
Define the long-term roadmap for a dedicated privacy engineering function, including strategy for team growth and investment.

•
Map the entire data ecosystem across Essential and the OS, covering signals, SDKs, cloud services, and storage, into a single source of truth.

•
Drive the engineering backlog to prioritise and close critical security gaps, with a focus on access hygiene, pipeline security, and encryption standards.

•
Translate GDPR and global regulatory frameworks into concrete technical specifications, with consent, retention, and deletion logic baked into the codebase.

•
Build risk-based guardrails that let product teams ship features fast without bypassing security reviews.

•
Work closely with Design and Brand to create transparent privacy controls and prompts that help users understand exactly how their data is used.

•
Own relationships with external security specialists and auditors to validate our architecture against global standards and lead incident response when needed.

What We're Looking For

•
Deep technical fluency in modern cloud stacks (AWS/GCP), API architectures, and identity management, with the ability to separate real security risks from noise.

•