Sr Privacy & Digital Product Auditor (Children’s Data Compliance)

TestPros•Sterling, VA

4d•Remote

About The Position

TestPros is seeking a Senior Privacy & Digital Product Auditor to support an independent third-party assessment of consumer-facing applications in accordance with the South Carolina Age-Appropriate Design Code Act (AADC) and related U.S. privacy requirements. This role will evaluate how digital products collect, process, and use data associated with minors, as well as assess product design, safety features, and algorithmic behaviors to ensure compliance with emerging children’s privacy regulations.

Requirements

Bachelor’s degree in a relevant field (e.g., Information Systems, Cybersecurity, Law, Public Policy, or related discipline)
7+ years of experience in privacy, compliance, digital risk, or product audit roles
Demonstrated experience conducting privacy assessments (PIA/DPIA) or similar compliance reviews
Strong knowledge of U.S. privacy frameworks, including:
COPPA
State privacy laws (e.g., CA, VA, CO, and emerging regulations)
Experience assessing consumer-facing applications (web/mobile)
Ability to analyze data flows and data governance practices
Familiarity with data subject rights (DSR) processes
Experience developing formal audit or compliance reports
Strong analytical, documentation, and communication skills

Nice To Haves

Certifications such as:
CIPP/US
CIPM
CIPT
Experience with:
Children’s data privacy and safety requirements
Trust & Safety or digital platform risk
Algorithmic systems or recommendation engines
UX/UI evaluation, including identification of dark patterns
Experience supporting regulatory or independent third-party audits
Background in consulting (e.g., Big 4) or technology platforms
Key Competencies
Ability to interpret emerging and ambiguous regulatory requirements
Strong understanding of digital product ecosystems and user behavior
Capability to translate technical and product findings into clear, defensible audit conclusions
Attention to detail with a structured, audit-driven mindset

Responsibilities

Conduct independent privacy and product compliance assessments of mobile and web-based applications
Evaluate the purpose of services and likelihood of access by minors
Analyze and document data collection, processing, storage, and sharing practices (PI/SPI)
Perform data flow mapping and assess alignment with data minimization principles
Review and assess design safety features and how they are implemented and used
Evaluate age verification and age estimation mechanisms
Assess data subject request (DSR) processes, including access, deletion, and correction workflows
Analyze algorithmic systems and recommendation engines, including their impact on minors
Identify potential dark patterns or manipulative UX/UI elements
Review mechanisms for reporting harm to minors and overall platform safety controls
Document findings, risks, and recommendations in formal audit reports suitable for regulatory and client review
Collaborate with privacy, legal, and product stakeholders to validate findings and ensure accuracy