Coalfire

Coalfire is a cybersecurity advisor that helps organizations avert threats, reduce risk, and turn security into a competitive advantage, fueling their success.

Internet Software & Services

Information Technology

251-1K (1000)

Founded 2001

$9M raised

13 open positions

Links

View All Jobs

Digital Privacy, Trust & Safety Consultant

1 month, 2 weeks ago

United States

Full-time

Mid Level

Compliance Manager

Cybersecurity

Apply Now

Coalfire

Coalfire is a cybersecurity advisor that helps organizations avert threats, reduce risk, and turn security into a competitive advantage, fueling their success.

Internet Software & Services

251-1K

Founded 2001

$9M raised

View All Jobs 13

Description

Conduct hands-on compliance audits and testing of digital platforms for adherence to global privacy and trust and safety regulations.
Design and execute independent audit methodologies and testing protocols for user protection mechanisms, content moderation systems, and data handling practices.
Test privacy-by-design controls, including data collection, processing, retention, deletion, consent, and data minimization mechanisms.
Audit child safety protections and age verification mechanisms for COPPA compliance and child exploitation prevention measures.
Evaluate content moderation systems and harmful content detection capabilities for effectiveness and fairness across user communities.
Audit algorithmic decision-making systems for discriminatory outcomes, transparency, and explainability.
Present assessment findings, risk analysis, and strategic recommendations through executive briefings and detailed reports.
Support other security and privacy consulting engagements as needed to maintain team capacity.

Requirements

At least 4 years of experience conducting independent compliance audits, privacy testing, or trust and safety assessments.
Bachelor's degree in CS, Law, Business, or equivalent hands-on audit and testing experience.
Deep expertise testing GDPR, CCPA, COPPA, EU AI Act, DSA, DMA, UK OSA, and SC AADC.
Hands-on privacy engineering experience with data flows, consent, data deletion, and third-party integrations.
Experience testing DSA, DMA, and OSA controls, including algorithmic transparency, content moderation, and fairness.
Experience testing third-party data sharing, tracking pixels, and SDKs.
Ability to verify cross-border data transfer compliance and adequacy decisions.
Knowledge of the EU AI Act, NIST AI RMF, or other AI frameworks, preferred.
Legal background or JD, or experience working closely with legal and compliance teams on privacy matters, preferred.

Benefits

Flexible work model with the option to choose when and where you work most effectively.
Paid parental leave.
Flexible time off.
Certification and training reimbursement.
Digital mental health and wellbeing support membership.
Comprehensive insurance options.
Opportunities to join employee resource groups and participate in in-person and virtual events.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Compliance Specialist - Operations & Risk

EQT 251-1K Gas Utilities

EQT is hiring a Compliance Specialist to support its Compliance Operations & Risk team with high-volume compliance monitoring, control testing, and reporting for LNG and LPG operations.

United States Junior Compliance Manager

5 hours, 9 minutes ago

Apply

5 hours, 9 minutes ago

DIS-18087 Hiring Remote Regulatory Manager

Distro 11-50 Internet Software & Services

Regulatory Manager / Sr. Regulatory Manager at Marketing Review Services, supporting clients in food, dietary supplement, cosmetic, and OTC industries with labeling, claims, and compliance review.

United States Full-time Lead Compliance Manager

$130k-$170k

5 hours, 39 minutes ago

Apply

5 hours, 39 minutes ago

Sr Security Engineer - Red Team - 11817

Coupa Software 1K-5K Internet Software & Services

Coupa is hiring a Sr Security Engineer to join its Red Team and strengthen the security of its cloud platform through hands-on penetration testing, red team exercises, and AI-focused security assessments.