Position Summary:
The Digital Privacy, Trust & Safety Consultant conducts independent audits and technical testing of digital platforms, services, and systems against global privacy and trust & safety regulations. This role involves hands-on testing of user protections, data handling practices, content moderation systems, and regulatory compliance mechanisms. The Consultant designs audit methodologies, executes compliance testing protocols, identifies gaps in trust & safety controls, and delivers detailed audit findings with remediation guidance to organizational and regulatory stakeholders.
What You'll Do
Conduct hands-on compliance audits and testing of digital platforms for adherence to global regulations such as GDPR, CCPA, COPPA, DSA, DMA, UK OSA, and SC AADC
Design and execute independent audit methodologies and testing protocols to assess user protection mechanisms, content moderation systems, and data handling practices
Test privacy-by-design mechanisms, such as data collection, processing, retention, and deletion mechanisms to verify compliance with user consent and data minimization requirements
Audit child safety protections and age verification mechanisms for COPPA compliance and child exploitation prevention measures
Test content moderation systems and harmful content detection capabilities for effectiveness and fairness across user communities
Audit algorithmic decision-making systems for discriminatory outcomes and test transparency and explainability in automated systems
Present assessment findings, risk analysis, and strategic recommendations to clients and their leadership through executive briefings and detailed reports
Support other security and privacy consulting engagements when necessary to maintain team capacity
What You'll Bring
At least 4 years conducting independent compliance audits, privacy testing, or trust & safety assessments
Bachelor's in CS, Law, Business, or equivalent hands-on audit and testing experience
Deep expertise testing GDPR, CCPA, COPPA, EU AI Act, DSA, DMA, UK OSA, SC AADC
Hands-on privacy engineering experience: data flows, consent, data deletion, third-party integrations
DSA, DMA, OSA testing: algorithmic transparency, content moderation, fairness
Experience testing third-party data sharing, tracking pixels, SDKs
Ability to verify cross-border data transfer compliance and adequacy decisions
Bonus Points
Knowledge of EU AI Act, NIST AI RMF and other AI frameworks
Legal background or JD, or experience working closely with legal and compliance teams on privacy matters
