Privacy, Risk, and AI Consultant

Coalfire

5d • $105,000 - $148,000

About The Position

The Privacy, Risk, and AI Consultant works as part of a team assessing clients’ security, privacy, and risk, advising them on cybersecurity programs, industry requirements, and standards, and supporting remediation activities. The role requires a strong understanding of privacy regulations such as GDPR and CCPA, cybersecurity risk frameworks such as NIST CSF, and AI trends. The Consultant performs assessments and leads interviews, develops reports and remediation roadmaps, and helps clients build sustainable cybersecurity and privacy programs. The role works closely with Project Managers, Directors, and other Delivery team members to manage project timelines and deliverables effectively.

The Consultant uses technical and business experience to develop client privacy offerings, guide security, privacy, and risk discussions, identify and address enterprise challenges, perform risk and compliance assessments, and advise clients on privacy programs and procedures. The position also contributes to the development and operation of enterprise information security and privacy programs, evaluates policies and regulatory compliance, and maintains professional expertise through continuing development and certifications.

Requirements

• At least 3 years of work experience in cybersecurity and privacy.
• Consulting experience or security experience in an industry segment such as finance, healthcare, energy, or technology.
• Experience testing GDPR, CCPA, COPPA, EU AI Act, DSA, DMA, UK OSA, or similar requirements.
• Knowledge of current information risk, security, privacy, and AI innovations, trends, challenges, and solutions.
• Exposure to information governance, risk, and security standards, frameworks, and professional practices such as NIST, ISO, and CIS.
• Knowledge of typical enterprise risk and security operational practices.
• Knowledge of information security-related solutions, tools, and utilities.
• Bachelor’s degree in Business Administration, Computer Science, Information Systems, Engineering, or a related field, or an equivalent combination of education and experience.
• Strong analytical and problem-solving abilities.
• Strong oral, written, and presentation skills.
• Ability to work independently and manage time.

Nice To Haves

• CIPM, CIPP, or another privacy-related certification.
• CISM, CCSK, CIPP, CISA, CGEIT, or CRISC certification(s).
• Cyber incident response experience.
• AWS, Azure, or Google Cloud Platform certification(s) and experience.
• AI risk and governance experience.

Responsibilities

• Develop engagement methodologies to enhance client privacy offerings.
• Serve as a Privacy, Risk, and AI thought leader on engagements, including preparing assessment plans, reviewing technical plans, documentation and evidence, evaluating procedures, and conducting client interviews.
• Support and guide information security, privacy, and risk discussions with technical and non-technical groups.
• Identify enterprise information security, privacy, and compliance problems and challenges; research and develop technical solutions.
• Perform information risk, security, and related compliance assessments, including testing related controls.
• Advise clients developing privacy programs and procedures, such as data inventories, DSARs, and ROPAs.
• Develop and operationalize enterprise information security and privacy programs and related components.
• Prepare and review advisory or assessment findings and recommendations reports.
• Assess cyber-related policies, procedures, legislation, and implementation directives.
• Assess and remediate compliance with relevant cybersecurity regulations and frameworks across multiple industries.
• Maintain industry-specific certifications and continue professional development to sustain depth of knowledge in the practice area.
• Work with Project Managers, Directors, and other Delivery team members to manage project timelines and deliverables.

Benefits

• Annual incentive, commission, and/or recognition programs may be available.
• Flexible work model in many cases, allowing employees to choose when and where they work most effectively.
• Paid parental leave.
• Flexible time off.
• Certification and training reimbursement.
• Digital mental health and wellbeing support membership.
• Comprehensive insurance options.
• Employee resource groups and in-person and virtual events.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level