Privacy, Data Protection, and Security Readiness Advisor, South Korea (W1-06-KR)

About the opportunity

Crew Scaler is seeking a Privacy, Data Protection, and Security Readiness Advisor to help Crew Scaler establish proportionate learner-data and information-security safeguards before any enrollment.

English is a key requirement for this role. The Crew Scaler team works in English: orientation, check-ins, the readiness memo and all team communication are in English, while you will read and assess original Korean-language sources.

This is a small advisory team in which each advisor owns one workstream. This posting is for the South Korea jurisdiction workstream; separate postings cover the other jurisdictions and the technical-security workstream. Crew Scaler will provide the proposed data flow, tools, and pilot assumptions. Advisors should identify when licensed local counsel or deeper technical testing is needed.

You will receive a written scope, a 45-minute orientation, templates or examples, and a named Crew Scaler contact. Most work is asynchronous. We use short meetings and written progress notes so volunteers in different time zones can contribute. We will not add major duties without discussing the time and scope with you first.

About Crew Scaler

Crew Scaler is a U.S. tax-exempt nonprofit organization (501(c)(3)). The U.S. IRS certified us, and we are committed to U.S. rigorous standards for certified non-profit organizations. Our board brings ~66+ years of U.S. Government & Military Experience and ~20+ years total Private Sector Experience with Apple, IBM, Tesla, and Synact. Our founder runs an AI Upskilling program for the U.S. Government, and we presented at NIST on Security Considerations for Multi-agent AI Systems. We help students, displaced workers, practitioners, and small organizations build useful AI capability with clear safeguards through open learning resources, applied research, small peer learning groups, and partnerships, including other AI research results and award-winning applications. We are exploring opportunities in Vietnam, South Korea, Japan, and Australia, and will launch only where demand, funding, local capacity, and learner protections are credible.

What you will do

• Map the minimum learner, volunteer, partner, payment, assessment, and credential data required, defaulting to least-privilege system access under HR-02
• Audit user prompt logging, data retention, and third-party API exposure within the AI Tutor platform per TECH-05 standards
• Audit assigned jurisdiction regulations (e.g., South Korea's Personal Information Protection Act, Personal Information Protection Commission guidance, and rules on children's and students' data, cross-border transfer, and AI use in education) or technical security controls
• Review access roles, backups, secrets handling, incident escalation under TECH-06 (AI Safety Incident Reporting Policy) and DATA-06 taxonomies, vendor questions, and dry-run checklists
• Produce a short readiness memo within your explicit assigned stream (Jurisdictional Privacy or Technical Security) with must-fix, should-fix, and specialist-advice items

What you will complete

By the end of the initial term, the expected outputs are a data map, assigned readiness analysis, practical notices or controls, and a launch checklist. The normal collaboration pattern is a kickoff, one midpoint review, and a closeout decision meeting. If evidence, approvals, or partner timing blocks an output, you will document the blocker and complete the parts within the volunteer team's control.

What you bring

• Professional spoken and written English (key requirement). The Crew Scaler team, orientation, weekly check-in, notes and deliverables are all in English. You must be able to hold a 30-minute conversation and write clear notes and short briefs in English without assistance
• At least 3 years of relevant work in privacy, data protection, data governance, security, risk, compliance, or technology law, or a relevant legal degree/certification
• Practical working knowledge of South Korea's data-protection and AI regulation, including the ability to read original Korean-language sources
• Ability to explain uncertainty and avoid presenting general research as local legal advice
• Respect for least-privilege access and confidential materials

Helpful, but not required:

• Experience in education technology, nonprofit systems, international transfers, incident response, or AI governance

What you can learn and build

• Apply privacy-by-design and security-by-design to a real learner journey before data is collected
• Compare legal requirements, operational controls, and vendor capabilities
• Produce a bounded jurisdiction or technical readiness memo suitable for a professional portfolio after confidential details are removed
• Collaborate across legal, records, platform, evaluation, and local program decisions

Support and boundaries

This is an unpaid volunteer opportunity. It does not promise employment, compensation, certification, academic credit, immigration benefits, or future paid work. After successful service, Crew Scaler can confirm your hours and completed outputs, provide public credit with your consent, and consider a reference based on work we directly observed.

How to apply

Write your application and the requested screening answer in English, and include a resume, LinkedIn profile, portfolio, or short work sample only where relevant. We review on a rolling basis and aim to reply within 7 days. The next step is a 20- to 30-minute conversation in English, followed by references or a work sample only when the role's access or professional duties justify them. Questions: volunteer@crewscaler.org. Learn more at https://crewscaler.org.