Senior Technical Program Manager, International Security & Privacy Compliance

CoreWeave is The Essential Cloud for AI. Built for pioneers by pioneers CoreWeave delivers a platform of technology tools and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs startups and global enterprises CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017 CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at .

CoreWeave is taking its AI cloud and data center services to new countries. Each new market brings its own data protection cybersecurity and data residency requirements and we have to meet them before we launch.

As the Technical Program Manager for International Security & Privacy Compliance you will own the program that gets CoreWeave compliant in each new market. You will turn local legal and regulatory requirements into controls timelines and owners. Then you will lead Legal Privacy Security Data Center Operations Product and Go-to-Market through to a compliant launch. The problem is defined; the solution is not. You will build the playbook as you go and make it repeatable for each market that follows.

The role is based in London so you can work during business hours with US teams and with teams in the Middle East and Asia-Pacific.

• Own the end-to-end compliance program for new-country launches from early regulatory assessment through go-live and ongoing upkeep.
• Work with Legal and Privacy counsel to turn local laws into concrete technical and operational requirements. These cover data protection and privacy cybersecurity data localization and residency cross-border data transfer incident reporting and registration or licensing. Legal owns the interpretation; you own turning it into delivery.
• Map country requirements to CoreWeaves existing control framework (SOC 2 ISO/IEC 27001 and related certifications). Find gaps and drive the work to close them with control owners in Security Engineering and Data Center Operations.
• Build and maintain source-of-truth program plans a requirements register and a dependency map for each market. Use them to drive high-quality execution against timelines leadership can rely on.
• Build country-specific incident and breach notification obligations into CoreWeaves incident response process before go-live.
• Find risks and blockers early such as data residency limits on architecture local vendor or partner obligations and regulator timelines. Drive them to resolution across teams or escalate them with clear options and tradeoffs.
• Coordinate privacy reviews and data protection impact assessments for in-country services working with Privacy and Product.
• Bring compliance requirements into product and data center launch plans early so customer-facing commitments contracts and Trust Center content reflect what we can actually deliver.
• Report program status risk and decisions needed to Security Legal and business leadership.
• Make the work repeatable. Turn each markets lessons into a scalable country-entry playbook templates and workflows in Jira and our GRC tooling.

• 5 years of relevant experience in international security and privacy compliance program management GRC or related technical program management preferably at a cloud data center or infrastructure provider.
• A track record of managing end-to-end large-scale cross-functional programs with significant organizational impact under little or no supervision. You are comfortable with work that has a defined problem but no defined solution.
• Strong execution skills. You get things done to high quality on timelines people can trust.
• You identify risks and blockers early and drive them to resolution.
• A solid grounding in industry best practices and frameworks such as ISO/IEC 27001 ISO/IEC 27701 SOC 2 NIST CSF and GDPR-style data protection regimes. You can make well-reasoned decisions and tradeoffs that fit CoreWeaves context.
• You quickly learn and keep up with the requirements of unfamiliar jurisdictions well enough to take an active part in decisions with Legal Security and Engineering.
• You use feedback to shape priorities and you make sure compliance solutions dont degrade the customer experience.
• You influence cross-functional decisions with a structured approach data and technical insight to achieve the intended outcome. You also contribute to the wider CoreWeave community for example by mentoring others.
• You win buy-in from critical stakeholders on your recommendations define clear communication strategies tailored to the audience from engineers to executives and seek out feedback to improve how you work.

• Experience running compliance programs across several countries especially in Asia-Pacific or the Middle East.
• Experience with data residency sovereign cloud or in-country hosting requirements for cloud or data center services.
• Certifications such as CIPP/E CIPM CISSP CISM CISA or PMP.
• Experience with GRC platforms and with Jira-based program tracking.

Wondering if youre a good fit We believe in investing in our people and value candidates who bring unique backgrounds even if you dont check every box. Here are a few qualities weve found make someone successful on our team. If some of this describes you wed love to talk.

• Youre comfortable balancing compliance rigor with practical scalable solutions.
• You take ownership bring structure to ambiguity and follow issues through to resolution.
• You communicate clearly with technical and non-technical stakeholders and build strong cross-functional partnerships.
• Youre energized by building processes and systems that improve how teams work.

To fulfill our obligation to protect client data successful applicants offered employment with CoreWeave will be required to complete a basic criminal record check conducted in compliance with GDPR. Employment offers are conditional upon receiving satisfactory check results.

What We Offer

In addition to a competitive salary we offer a variety of benefits to support your needs including:

• Family-level Medical Insurance
• Family-level Dental Insurance
• Generous Pension Contribution
• Life Assurance at 4x Salary
• Critical Illness Cover
• Employee Assistance Programme
• Tuition Reimbursement
• Work culture focused on innovative disruption

Benefits may vary by location.

Equal Opportunity

CoreWeave is an equal opportunity employer committed to fostering an inclusive and supportive workplace. All qualified applicants and candidates will receive consideration for employment without regard to race color religion sex disability age sexual orientation gender identity national origin veteran status or genetic information.

Recruitment Agencies

CoreWeave does not accept speculative CVs. Any unsolicited CVs received will be treated as the property of CoreWeave and your Terms & Conditions associated with the use of CVs will be considered null and void.

Any unsolicited CVs sent by your company to us that is to say in any situation where we have not directly engaged your company in writing to supply candidates for a specific vacancy will be considered by us to be a free gift leaving us liable for no fees whatsoever should we choose to contact the candidate directly and engage the candidates services and will in no way establish any prior claim by your company to representation of that candidate should the candidates details also be submitted by any other party.

Export Control Compliance

This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information applicant must either be (A) a U.S. person defined as a (i) U.S. citizen or national (ii) U.S. lawful permanent resident (green card holder) (iii) refugee under 8 U.S.C. 1157 or (iv) asylee under 8 U.S.C. 1158 (B) eligible to access the export controlled information without a required export authorization or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency. CoreWeave may for legitimate business reasons decline to pursue any export licensing process.

Updated privacy notice - UK and EU Job Applications

When you apply to a job on this site the personal data contained in your application will be collected by CoreWeave UK Ltd. (Controller) which is located at

Phosphor (6th Floor) 133 Park Street London SE1 9EA

and can be contacted by emailing . Controllers data protection officer can be contacted at . Your personal data will be processed for the purposes of managing Controllers recruitment related activities which include setting up and conducting interviews and tests for applicants evaluating and assessing the results thereto and as is otherwise needed in the recruitment and hiring processes. Such processing is legally permissible under Art. 6(1)(f) of (i) Regulation (EU) 2016/679 (General Data Protection Regulation (GDPR) and (ii) the GDPR as it forms part of the laws of the UK (UK GDPR) as necessary for the purposes of the legitimate interests pursued by the Controller which are the solicitation evaluation and selection of applicants for employment. Your personal data will be shared with Greenhouse Software Inc. a cloud services provider located in the United States of America and engaged by Controller to help manage its recruitment and hiring process on Controllers behalf. With respect to transfers originating from the UK or the European Economic Area (EEA) to a country outside the UK or the EEA we implement the appropriate transfer mechanism(s) and other appropriate solutions to address cross-border transfers as required by applicable law. You may request a copy of the suitable mechanisms we have in place by contacting us at

Your personal data will be retained by Controller as long as Controller determines it is necessary to evaluate your application for employment. Where permitted by applicable law we may also retain your personal data for a limited period after the recruitment process ends in order to consider you for future job opportunities respond to legal claims or comply with record-keeping obligations. Under the GDPR and the UK GDPR you have the right to request access to your personal data to request that your personal data be rectified or erased and to request that processing of your personal data be restricted. You also have the right to data addition you may lodge a complaint with the relevant supervisory authority: (i) A list of Europes data protection authorities can be found here; and (ii) for the UK this is the Information Commissioners Office.

For additional information please see our .