Digital Privacy, Trust & Safety Consultant

About Coalfire Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Chicago, Illinois with offices across the U.S. and U.K., and we support clients around the world. But that’s not who we are – that’s just what we do. We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference. Position Summary: The Digital Privacy, Trust & Safety Consultant conducts independent audits and technical testing of digital platforms, services, and systems against global privacy and trust & safety regulations. This role involves hands-on testing of user protections, data handling practices, content moderation systems, and regulatory compliance mechanisms. The Consultant designs audit methodologies, executes compliance testing protocols, identifies gaps in trust & safety controls, and delivers detailed audit findings with remediation guidance to organizational and regulatory stakeholders.

What You'll Do

• Conduct hands-on compliance audits and testing of digital platforms for adherence to global regulations such as GDPR, CCPA, COPPA, DSA, DMA, UK OSA, and SC AADC
• Design and execute independent audit methodologies and testing protocols to assess user protection mechanisms, content moderation systems, and data handling practices
• Test privacy-by-design mechanisms, such as data collection, processing, retention, and deletion mechanisms to verify compliance with user consent and data minimization requirements
• Audit child safety protections and age verification mechanisms for COPPA compliance and child exploitation prevention measures
• Test content moderation systems and harmful content detection capabilities for effectiveness and fairness across user communities
• Audit algorithmic decision-making systems for discriminatory outcomes and test transparency and explainability in automated systems
• Present assessment findings, risk analysis, and strategic recommendations to clients and their leadership through executive briefings and detailed reports
• Support other security and privacy consulting engagements when necessary to maintain team capacity

What You'll Bring

• At least 4 years conducting independent compliance audits, privacy testing, or trust & safety assessments
• Bachelor's in CS, Law, Business, or equivalent hands-on audit and testing experience
• Deep expertise testing GDPR, CCPA, COPPA, EU AI Act, DSA, DMA, UK OSA, SC AADC
• Hands-on privacy engineering experience: data flows, consent, data deletion, third-party integrations
• DSA, DMA, OSA testing: algorithmic transparency, content moderation, fairness
• Experience testing third-party data sharing, tracking pixels, SDKs
• Ability to verify cross-border data transfer compliance and adequacy decisions

Bonus Points

• Knowledge of EU AI Act, NIST AI RMF and other AI frameworks
• Legal background or JD, or experience working closely with legal and compliance teams on privacy matters