Compliance / Privacy Officer
SeniorPart-timeOperations
Own GDPR / COPPA / CAN-SPAM / Stripe compliance. Kids audience + EU traffic + subscriptions = real exposure.
What you'll do
- •Audit and maintain arbastro privacy policy + ToS as products evolve
- •Handle Data Subject Access Requests (GDPR Article 15) + deletion requests (Article 17)
- •Run COPPA gap analysis for any arbastro game where under-13 audience is plausible
- •Review marketing email flows for CAN-SPAM compliance (we’ve been careful but want it formally signed off)
- •Coordinate with Stripe on SAQ-A self-assessment annually
- •Owner-level approval flag on any future feature that collects new personal data
Requirements
- •3+ years privacy / compliance, ideally in a consumer product context
- •Working knowledge of GDPR (DPO-level), COPPA (kids audience), CAN-SPAM, UK Age-Appropriate Design Code, Stripe SAQ-A
- •Comfortable writing privacy policies, ToS updates, DPIA documents
- •Familiarity with cookie consent, data subject access requests, data retention policies
- •Bonus: licensed lawyer (US bar) — but not required; we have outside counsel for hard cases
Benefits
- •Remote work
- •Hourly retainer
- •Strategic role — touches every product
- •Direct line to corporate leadership
arbastro is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant.
arbastro will not discriminate or retaliate against applicants who inquire about, disclose, or discuss their compensation.
arbastro is a drug-free workplace.
arbastro will consider for employment all qualified applicants with criminal histories in a manner consistent with applicable law. If you’re applying for a position in San Francisco, review the San Francisco Fair Chance Ordinance guidelines applicable in your area.
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
arbastro may use Artificial Intelligence in the review of your application.
