Digital Privacy, Trust & Safety Consultant

Position Summary

The Digital Privacy, Trust & Safety Consultant conducts independent audits and technical testing of digital platforms, services, and systems against global privacy and trust & safety regulations. This role involves hands‑on testing of user protections, data handling practices, content moderation systems, and regulatory compliance mechanisms. The Consultant designs audit methodologies, executes compliance testing protocols, identifies gaps in trust & safety controls, and delivers detailed audit findings with remediation guidance to organizational and regulatory stakeholders.

• Conduct hands‑on compliance audits and testing of digital platforms for adherence to global regulations such as GDPR, CCPA, COPPA, DSA, DMA, UK OSA, and SC AADC
• Design and execute independent audit methodologies and testing protocols to assess user protection mechanisms, content moderation systems, and data handling practices
• Test privacy‑by‑design mechanisms, such as data collection, processing, retention, and deletion mechanisms to verify compliance with user consent and data minimization requirements
• Audit child safety protections and age verification mechanisms for COPPA compliance and child exploitation prevention measures
• Test content moderation systems and harmful content detection capabilities for effectiveness and fairness across user communities
• Audit algorithmic decision‑making systems for discriminatory outcomes and test transparency and explainability in automated systems
• Present assessment findings, risk analysis, and strategic recommendations to clients and their leadership through executive briefings and detailed reports
• Support other security and privacy consulting engagements when necessary to maintain team capacity

• At least 4 years conducting independent compliance audits, privacy testing, or trust & safety assessments
• Bachelor’s in CS, Law, Business, or equivalent hands‑on audit and testing experience
• Deep expertise testing GDPR, CCPA, COPPA, EU AI Act, DSA, DMA, UK OSA, SC AADC
• Hands‑on privacy engineering experience: data flows, consent, data deletion, third‑party integrations
• DSA, DMA, OSA testing: algorithmic transparency, content moderation, fairness
• Experience testing third‑party data sharing, tracking pixels, SDKs
• Ability to verify cross‑border data transfer compliance and adequacy decisions

• Knowledge of EU AI Act, NIST AI RMF and other AI frameworks
• Legal background or JD, or experience working closely with legal and compliance teams on privacy matters

$105,000 - $148,000 a year

At Coalfire, all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Coalfire is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application or interview process, contact our Human Resources team at