FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in translating GDPR and COPPA requirements into actionable security controls, with a strong focus on compliance, risk management, and privacy engineering. Proven ability to lead control testing programs and effectively communicate with stakeholders across all levels.
Highest-signal resume keywords
GDPR ComplianceCOPPA TestingControl Testing ProgramsPrivacy EngineeringRisk Management
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Security ComplianceControl TestingData ProtectionAudit DocumentationData MinimizationAge-Gating MechanismsConsent MechanismsData RetentionEncryptionIdentity Management
Soft Skills
Excellent CommunicationLeadershipCoachingCollaborationCredibility
Tools & Technologies
NIST FrameworkISO 27001ISO 27701SOC 2Cloud SecurityMobile SecurityWeb Security
Industry Keywords
GRCPrivacy LawsData Subject RequestsDPIAsBreach NotificationRegulatory ComplianceChildren's Privacy
Tech Stack
Tools & technologiesCloud
About the role
Key responsibilities & impact- Translate GDPR and COPPA requirements into specific, testable security controls
- Design and run recurring control tests, including sampling, evidence collection, and re-performance, across apps, websites, SDKs, analytics, advertising, and vendor integrations
- Verify age-gating, verifiable parental consent, data minimization, retention, deletion, and parental access flows for users under 13
- Own the security side of GDPR Article 32 (security of processing) and Article 25 (data protection by design and by default)
- Maintain and test controls for data subject requests, records of processing, retention, and cross-border transfers
- Lead security input on DPIAs and vendor and processor assessments, and keep breach notification processes ready for the 72-hour requirement
- Track findings to closure with engineering and product owners, and report control effectiveness to leadership
- Prepare for and lead responses to audits, regulator inquiries, and partner or platform privacy reviews
- Monitor changes to GDPR and UK GDPR guidance, the FTC COPPA Rule, and US state children's privacy laws, and update controls accordingly
- Coach and guide junior compliance and security team members
Requirements
What you’ll need- 10+ years in security compliance, GRC, privacy engineering, or technology risk, including 4+ years at a senior or lead level
- Hands-on experience testing controls against COPPA, including consent mechanisms, age screening, and handling of data from children under 13
- Working knowledge of GDPR and UK GDPR as they apply to security and engineering, especially Articles 25, 30, 32, 33, and 35
- Proven ability to turn legal text into clear, testable control requirements
- Experience building and running control testing programs with audit-ready documentation
- Experience with at least one major framework: NIST (CSF or Privacy Framework), ISO 27001/27701, or SOC 2
- Strong understanding of cloud, mobile, and web data flows, identity and access management, encryption, logging, and data retention
- Excellent written and verbal communication, with credibility from the boardroom to the engineering team
- Bachelor's degree in a relevant field, or equivalent practical experience
Benefits
Comp & perks- 15% bonus
- Equity
- Generous Medical (Blue Cross Blue Shield)
- Dental
- Vision
- Company-paid Life Insurance
- Company contributions to employee Health Savings Accounts (HSA)
- 401k Plan with Safe Harbor company-matching
- Flexible vacation policy
- Paid company holidays
- Company-provided technology package
- Relocation assistance where applicable, including travel and company-provided housing for the first 90 days