Associate General Counsel, Privacy Compliance

• Help Cloudflare navigate the complicated challenges of processing personal data across an ever-changing and diverse regulatory landscape. • Oversee the functions of Cloudflare’s Office of the Data Protection Officer, managing the existing privacy programme. • Keep the company compliant with all applicable data protection and privacy laws, including the EU GDPR. • Oversee Cloudflare’s responsible AI programme and the compliance requirements stemming from AI regulation, including the EU AI Act. • Focus on building, implementing, and maintaining both the privacy and AI programme elements. • Work closely with the non-lawyers on the Data and Privacy Operations team to put those programmes into practice. • Report directly to Cloudflare’s Chief Privacy Officer. • Work from London on a hybrid basis.

• Hold an LLB, JD, or equivalent degree with strong academic credentials. • Be admitted to practice law in a jurisdiction where Cloudflare has an office, or be US or UK qualified. • Bring 10+ years of relevant legal experience counselling a global company on international privacy and data protection issues. • Bring expert knowledge of EMEA-region AI, privacy, and data protection laws and compliance regimes at all levels, including industry-specific ones. • Advise on cross-border data transfer requirements globally. • Counsel with a solution-oriented mindset, a growth outlook, and a strong sense of humour. • Communicate strongly and lead with empathy while embracing diverse points of view. • Adapt and thrive in a fast-paced environment. • Advise, build relationships, and work collaboratively with stakeholders across teams to reach effective solutions amenably. • Prioritise work and give advice under deadlines. • Draft documents, policies, and messages precisely while keeping them concise and digestible for non-lawyers. • Work flexibly on occasion to accommodate a globally distributed team.

• Bring in-house time at a technology company with established privacy compliance protocols, which is preferred. • Bring experience at a top regional or global law firm. • Bring a technical background or expertise, which is highly desired, though a science or technical degree is not a prerequisite. • Bring a genuine passion for technology. • Bring experience of privacy and data due diligence for M&A and post-acquisition integration. • Bring familiarity with privacy incident response and the judgment calls it demands. • Spot problems everyone else has normalised and build a solution with the latest tools.

• Act as subject matter expert on existing and emerging AI and data protection regulation across EMEA, focusing on jurisdictions where Cloudflare has offices in the EU, UK, Switzerland, and UAE. • Work across functions to advise on how that regulation affects Cloudflare’s business. • Understand and advise on requirements for cross-border data transfers globally. • Collaborate with and advise product lawyers on privacy by design policies. • Advise the Data and Privacy Operations team on data subject requests, records of processing activities, and privacy and AI impact assessments. • Advise that team on conducting and approving privacy and AI vendor reviews. • Support the commercial transactions legal team in negotiating data processing addendums and similar contractual language under global privacy laws. • Support the corporate legal team on privacy due diligence for M&A and on post-acquisition integration. • Advise on the data protection implications of security and privacy incidents, guiding cross-functional teams on handling procedures and communications. • Create playbooks and FAQ libraries so teams have current guidance on privacy, data governance, and responsible AI.

We have used Cloudflare products ourselves, including Turnstile to protect apps from bots, so we know first-hand how solid their tech is, and that matters when you are thinking about where to work. With over $2.1 billion in annual revenue, 34% growth in Q4 2025, and $4 billion+ in cash reserves, Cloudflare is financially rock-solid and still growing fast. They operate one of the largest networks in the world, sit in front of roughly one in five websites, and are pushing hard into AI infrastructure and the agentic web. The scale of what they do is genuinely impressive; so many of the apps and services you use every day depend on Cloudflare without you even knowing it. Across Glassdoor, employees consistently highlight the great products, friendly and smart colleagues, positive working environment, and genuine flexible hybrid and work-from-home arrangements. They also offer unlimited paid time off and have a real focus on diversity and inclusion. We should be upfront, though: the Glassdoor rating sits at 3.4, and reviews are mixed. While the culture and people are widely praised, compensation competitiveness and slow promotion processes are recurring pain points. However, if you want to solve hard, Internet-scale problems at a company whose products you probably already rely on, Cloudflare is a brilliant place to do that.

• Report directly to the Chief Privacy Officer. • Own both the privacy programme and the responsible AI programme across EMEA. • Work on genuinely novel questions arising from the EU AI Act and evolving data protection regimes. • Advise across product, commercial, corporate, and operations teams rather than a single function. • Work hybrid from the London office within a globally distributed team. • Join a company named to Entrepreneur Magazine’s Top Company Cultures list and ranked among Fast Company’s World’s Most Innovative Companies. • Contribute to public interest work including Project Galileo, the Athenian Project, and the 1.1.1.1 resolver.

Cloudflare is on a mission to help build a better Internet, running one of the world’s largest networks and powering millions of websites and Internet properties for customers from individual bloggers to Fortune 500 companies. Ensuring the privacy of personal information is core to that mission, and its Office of the Data Protection Officer runs the privacy and responsible AI programmes across every jurisdiction the company operates in. Fundamental to Cloudflare’s mission is protecting the free and open Internet: Project Galileo has equipped more than 2,400 journalism and civil society organisations across 111 countries with protection at no cost, and the Athenian Project has served more than 425 local government election websites across 33 states.