Privacy Operations Lead

The posting, as Deepgram wrote it

COMPANY OVERVIEW

Deepgram is the leading platform underpinning the emerging trillion-dollar Voice AI economy, providing real-time APIs for speech-to-text (STT), text-to-speech (TTS), and building production-grade voice agents at scale. More than 200,000 developers and 1,300+ organizations build voice offerings that are ‘Powered by Deepgram’, including Twilio, Cloudflare, Sierra, Decagon, Vapi, Daily, Cresta, Granola, and Jack in the Box. Deepgram’s voice-native foundation models are accessed through cloud APIs or as self-hosted and on-premises software, with unmatched accuracy, low latency, and cost efficiency. Backed by a recent Series C led by leading global investors and strategic partners, Deepgram has processed over 50,000 years of audio and transcribed more than 1 trillion words. There is no organization in the world that understands voice better than Deepgram.

COMPANY OPERATING RHYTHM

At Deepgram, we expect an AI-first mindset—AI use and comfort aren’t optional, they’re core to how we operate, innovate, and measure performance.

Every team member who works at Deepgram is expected to actively use and experiment with advanced AI tools, and even build your own into your everyday work. We measure how effectively AI is applied to deliver results, and consistent, creative use of the latest AI capabilities is key to success here. Candidates should be comfortable adopting new models and modes quickly, integrating AI into their workflows, and continuously pushing the boundaries of what these technologies can do.

Additionally, we move at the pace of AI. Change is rapid, and you can expect your day-to-day work to evolve just as quickly. This may not be the right role if you’re not excited to experiment, adapt, think on your feet, and learn constantly, or if you’re seeking something highly prescriptive with a traditional 9-to-5.

THE OPPORTUNITY

Deepgram is looking for a Privacy Operations Lead to own the operational backbone of our privacy program. Deepgram processes audio — often some of the most sensitive data our customers hold — across several deployment models: hosted with model-improvement opted in, hosted with model-improvement opted out (effectively zero data retention), single-tenant Deepgram Dedicated deployments with regional data residency, and fully self-hosted deployments running in the customer's own environment. Our hosted services run primarily on our own bare-metal infrastructure in colocation datacenters, with AWS used for overflow capacity and a small set of services — so knowing where data actually lives means knowing our datacenters, not just a cloud console.

You will be the person who knows, in operational detail, how data moves through each of those models — and who turns that knowledge into durable artifacts: data flow maps, records of processing, assessment templates, playbooks, and self-service guidance that Legal, Engineering, and Sales Engineering can use without re-deriving the answer every time. You w
[…]
tions, legal operations, or technical privacy and compliance — enough that you have run assessments end to end and owned the outcome.

• Demonstrated ownership of privacy operational systems at scale: data maps, DSAR workflows, consent management, retention processes, or the tooling behind them.
• Technically fluent and unintimidated: you can read an architecture diagram, follow a data flow through datacenter and cloud infrastructure, understand what a log line or a retention setting actually implies, and ask the questions that expose a gap — without needing someone to translate for you.
• Practical, applied experience with GDPR and CCPA/CPRA, and a current view of where AI regulation is heading.
• Able to hold your own with a Fortune 500 privacy team or DPO without escalating every question.
• Clear writer. A large share of this job is producing documents that customers, auditors, and engineers rely on.
• Strong bias toward automating and documenting your own work rather than becoming the bottleneck for it.
• Comfortable with ambiguity and with making a defensible call when the law is unsettled.

NICE TO HAVE

• CIPM, CIPT, CIPP/E, or equivalent certification.
• Comfort reading code (Python, Go, Rust, or TypeScript), writing SQL, or scripting your own tooling.
• Familiarity with on-premise or colocation infrastructure, containerized (Docker) workloads, and how data residency works outside a single cloud provider; AWS familiarity a plus.
• Experience with ML/AI data pipelines and training-data governance.
• Privacy work in a hybrid model — multi-tenant SaaS alongside self-hosted or on-premise deployments.
• Exposure to formal audits: SOC 2, ISO 27001, HIPAA, PCI DSS.

Notice: We're aware of individuals impersonating Deepgram recruiters. All legitimate Deepgram recruiting communication comes from an @deepgram.com http://deepgram.com email address. If you've received a message claiming to be Deepgram, please forward it to careers@deepgram.com.