Principal Compliance Lead, Security – COPPA, GDPR Control Testing

🕒 Yesterday

🏄 California – Remote

🏄 California – Remote

💵 $235k - $294k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

MrBeast

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2018

🛍️ eCommerce

☁️ SaaS

🤝 B2B

eCommerce • SaaS • B2B

MrBeast is associated with the Linkpop tool, a mobile-first, customizable link in bio service powered by Shopify, allowing users to turn their social media profiles into monetizable storefronts. It enables creators, influencers, and brands to showcase and sell products directly through their social media bios, integrating seamless Shopify checkout processes. Linkpop provides analytics and customization options to enhance brand presence and sales conversion, supporting additional revenue streams like merchandise sales, dropshipping, and affiliate promotions. This tool is particularly efficient for creators looking to optimize their social media engagement into actionable sales paths, enabling users to track performance and manage links across platforms efficiently.

📋 Description

• Translate GDPR and COPPA requirements into specific, testable security controls • Design and run recurring control tests, including sampling, evidence collection, and re-performance, across apps, websites, SDKs, analytics, advertising, and vendor integrations • Verify age-gating, verifiable parental consent, data minimization, retention, deletion, and parental access flows for users under 13 • Own the security side of GDPR Article 32 (security of processing) and Article 25 (data protection by design and by default) • Maintain and test controls for data subject requests, records of processing, retention, and cross-border transfers • Lead security input on DPIAs and vendor and processor assessments, and keep breach notification processes ready for the 72-hour requirement • Track findings to closure with engineering and product owners, and report control effectiveness to leadership • Prepare for and lead responses to audits, regulator inquiries, and partner or platform privacy reviews • Monitor changes to GDPR and UK GDPR guidance, the FTC COPPA Rule, and US state children's privacy laws, and update controls accordingly • Coach and guide junior compliance and security team members

🎯 Requirements

• 10+ years in security compliance, GRC, privacy engineering, or technology risk, including 4+ years at a senior or lead level • Hands-on experience testing controls against COPPA, including consent mechanisms, age screening, and handling of data from children under 13 • Working knowledge of GDPR and UK GDPR as they apply to security and engineering, especially Articles 25, 30, 32, 33, and 35 • Proven ability to turn legal text into clear, testable control requirements • Experience building and running control testing programs with audit-ready documentation • Experience with at least one major framework: NIST (CSF or Privacy Framework), ISO 27001/27701, or SOC 2 • Strong understanding of cloud, mobile, and web data flows, identity and access management, encryption, logging, and data retention • Excellent written and verbal communication, with credibility from the boardroom to the engineering team • Bachelor's degree in a relevant field, or equivalent practical experience

🏖️ Benefits

• 20% bonus • Equity • Generous Medical (Blue Cross Blue Shield), Dental, Vision and company-paid Life Insurance • Company contributions to employee Health Savings Accounts (HSA) • 401k Plan with Safe Harbor company-matching • Flexible vacation policy and paid company holidays • Company-provided technology package • Relocation assistance where applicable, including travel and company-provided housing for the first 90 days

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume