Data Privacy and Security Compliance Consultant
Kaamel Technology
This job at a glance
- Who can apply
- New grads and up to 1 year · Bachelor's degree
- Must know
- HIPAAIncident responseAuditingProduct managementStakeholder managementCybersecurity
- Work
- On-site in Mountain View
- Pay
- Not stated by the employer.
- Skill demand
- Auditing49%Incident response31%HIPAA11%Product management9%of 99 similar entry-level jobs posted in the US this week
- Listed
- Nov 3, 2026 · still open
Sign in free to see which of these skills your resume already shows.
About Kaamel
Kaamel is a compliance, privacy, and data security firm. They help AI, SaaS, and technology companies earn and keep certifications across SOC 2, ISO 27001/27701, ISO 42001, GDPR, HIPAA, and CCPA. They also deliver security services, including virtual CISO (vCISO) and incident response (IR).
The Role
As an Associate Compliance Consultant, you will guide clients from initial scoping through certification. You will be their day-to-day point of contact, translating framework requirements into practical action, keeping projects on track, and working with auditors to achieve client certification. This role operates in an AI-native environment, where you will refine prompts, templates, and workflows to improve engagement efficiency.
Key Responsibilities
Client Delivery
- Serve as a primary point of contact for clients pursuing SOC 2, ISO 27001/42001, GDPR, HIPAA, and CCPA compliance.
- Run gap assessments, scope engagements, and build remediation roadmaps tailored to each client’s environment and business.
- Draft and tailor policies, procedures, risk assessments, and privacy documentation.
- Manage project timelines, client meetings, and deliverables across multiple concurrent engagements.
- Explain compliance requirements clearly to founders, engineers, legal teams, and non-technical stakeholders.
Audit Support
- Coordinate with external auditors on evidence requests, sampling questions, and control walkthroughs.
- Review client evidence for completeness and accuracy before submission.
- Track and resolve audit comments through to closure.
AI-enabled Delivery
- Use AI tools daily for policy drafting, control mapping, evidence review, and client communication.
- Improve the team’s prompts, templates, and playbooks based on real engagements.
- Identify repetitive work in client delivery and propose ways AI can reduce it.
Requirements & Tech Stack
Required
- Bachelor’s or Master’s degree in Information Security, Computer Science, Law, Information Systems, Business, or a related field.
- Strong written and verbal communication in English.
- Hands-on experience using AI tools (e.g., Claude, ChatGPT) to research, write, analyze, or streamline real work.
- Strong attention to detail and the ability to manage multiple workstreams and deadlines.
- Genuine interest in security, privacy, and regulatory compliance.
- Authorization to work in the United States without current or future visa sponsorship.
Strongly Preferred
- Professional working proficiency in Mandarin Chinese.
- Exposure to a compliance or security framework: SOC 2, ISO 27001, GDPR, HIPAA, or CCPA.
- Basic understanding of cloud infrastructure (AWS/GCP), IAM, logging, and access control.
- Experience with compliance platforms such as Drata or Vanta.
- Familiarity with scripting (Python or similar) or building simple AI workflows.
- Prior consulting, legal, audit, or client-facing internship experience.