Senior Manager, AI & Data Privacy

About Nscale

Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility.

We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future.

About the Role

We’re looking for a U.S.-based AI & Data Privacy Senior Manager with exceptional people, leadership and communication skills to help lead privacy, AI and information security compliance across Nscale’s U.S. business and global operations.

Sitting within the Legal & Compliance team, you’ll support senior leadership and partner closely with corporate, commercial, AI infrastructure, procurement, security, operations, technology, HR, Marketing and Finance teams. You’ll be a pragmatic leader who can operate across complex legal, regulatory, commercial and operational topics with high levels of ambiguity.

This role is critical to scaling Nscale responsibly. You’ll help embed privacy-, AI- and cyber-by-design across key initiatives, strengthen governance, risk and compliance programmes, and provide trusted subject matter expertise as the business grows.

What you’ll be doing

Privacy, AI and compliance governance

• Lead execution of our Privacy & Information Security Compliance and AI Governance, Risk and Compliance programmes in the U.S., while supporting execution in other regions.
• Design, draft and oversee implementation of data and AI policies and processes.
• Conduct or support DPIAs, TIAs and AI conformity assessments, liaising with teams across the business to ensure these are actioned.
• Support the Legal & Compliance team on Board and executive reporting.

Cross-functional legal and regulatory advisory

• Lead and/or contribute as a subject matter expert to high-priority, complex and varied projects in the U.S. and globally across legal, regulatory, corporate, technology and operations domains.
• Provide tactical subject matter expertise to key stakeholders from HR, Marketing, Finance, technology, operations and other communities.
• Engage with stakeholders on enterprise risk management.
• Foster a collaborative environment by actively engaging with cross-functional teams.

Third-party risk and commercial support

• Partner with commercial legal, procurement, security, operations, AI infrastructure and other teams to ensure proper third-party risk management of suppliers and customers.
• Support due diligence and contractual controls covering privacy, AI and cyber provisions, DPAs and data transfer compliance.
• Support investor due diligence, M&A and similar workstreams as a subject matter expert.

Incident, regulatory and data subject response

• Partner with cyber, technology, operations and other teams on incident response and cyber investigations.
• Manage DSARs, complaints and regulatory enquiries, including from the ICO or other data regulators.
• Help ensure privacy, AI and cyber considerations are built into incident response and investigation processes.

KPIs

• Execution of U.S. Privacy & Information Security Compliance and AI Governance, Risk and Compliance programmes
• Completion and actioning of DPIAs, TIAs and AI conformity assessments
• Effective third-party risk management across suppliers and customers
• Timely handling of DSARs, complaints, regulatory enquiries and incident response support

About You

• U.S.-qualified attorney with several years of in-house experience, preferably in a U.S. or international tech company such as a hyperscaler or AI lab; exceptional private practice candidates will also be considered.
• Previous experience and knowledge of data privacy, cyber, AI and other data laws.
• Strong familiarity with U.S. federal and state data laws, the EU and UK GDPR, the EU AI Act and similar laws in APAC.
• Strong analytical and project management skills, with attention to detail and exp…