Senior Technical Program Manager, International Security & Privacy Compliance

CoreWeave is The Essential Cloud for AI™. Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at www.coreweave.com . We're proud to be a Living Wage accredited Employer. CoreWeave is The Essential Cloud for AI™. Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at www.coreweave.com . About the Role CoreWeave is taking its AI cloud and data center services to new countries. Each new market brings its own data protection, cybersecurity, and data residency requirements, and we have to meet them before we launch. As the Technical Program Manager for International Security & Privacy Compliance, you will own the program that gets CoreWeave compliant in each new market. You will turn local legal and regulatory requirements into controls, timelines, and owners. Then you will lead Legal, Privacy, Security, Data Center Operations, Product, and Go-to-Market through to a compliant launch. The problem is defined; the solution is not. You will build the playbook as you go and make it repeatable for each market that follows. The role is based in London so you can work during business hours with US teams and with teams in the Middle East and Asia-Pacific. What You'll Do • Own the end-to-end compliance program for new-country launches, from early regulatory assessment through go-live and ongoing upkeep. • Work with Legal and Privacy counsel to turn local laws into concrete technical and operational requirements. These cover data protection and privacy, cybersecurity, data localization and residency, cross-border data transfer, incident reporting, and registration or licensing. Legal owns the interpretation; you own turning it into delivery. • Map country requirements to CoreWeave's existing control framework (SOC 2, ISO/IEC 27001, and related certifications). Find gaps and drive the work to close them with control owners in Security, Engineering, and Data Center Operations. • Build and maintain source-of-truth program plans, a requirements register, and a dependency map for each market. Use them to drive high-quality execution against timelines leadership can rely on. • Build country-specific incident and breach notification obligations into CoreWeave's incident response process before go-live. • Find risks and blockers early, such as data residency limits on architecture, local vendor or partner obligations, and regulator timelines. Drive them to resolution across teams, or escalate them with clear options and tradeoffs. • Coordinate privacy reviews and data protection impact assessments for in-country services, working with Privacy and Product. • Bring compliance requirements into product and data center launch plans early, so customer-facing commitments, contracts, and Trust Center content reflect what we can actually deliver. • Report program status, risk, and decisions needed to Security, Legal, and business leadership. • Make the work repeatable. Turn each market's lessons into a scalable country-entry playbo