Web Developer — Website Compliance Audit & Consent Setup (Contract)

Company: Smart Business Revolution (SBR)
Location: Remote
Type: Short-term contract / project-based
Site: ---------- (WordPress + Divi)

About us

We're an AI and SEO startup helping companies get found, not just on Google but on AI driven platforms like ChatGPT, Gemini, Perplexity, and Google's AI Overviews. This emerging field is called GEO (Generative Engine Optimization), and it's where search is heading. We work with growth minded businesses that want to stay visible as discovery shifts from blue links to AI answers. Founded by a serial entrepreneur who has built and scaled multiple ventures, the company is small, fast, and built for the new era of AI enabled search.

About the role

My WordPress site currently runs Google Analytics and other third-party tracking, and I need it brought into a defensible compliance posture on two fronts: California privacy law (CIPA-driven cookie/tracking litigation) and web accessibility (WCAG 2.1 AA / ADA). This is a scoped, one-time project with clear deliverables, not an open-ended retainer. That said, if this first project goes well, it would expand into ongoing work — applying the same compliance work across our client sites and taking on additional web development for clients, including building web pages and similar projects.

I want someone who has actually done this work before, not someone learning on my site. You should be able to speak to the current California litigation landscape (consent-before-tracking, prior-blocking) and the WCAG 2.1 AA standard without me explaining it.

What you'll do

1. Tracker and script audit


Inventory every third-party script, cookie, pixel, tag, and tracker firing on the site, and identify what each one sends and to whom.
Flag anything firing before user consent (this is the core legal exposure).


2. Consent management setup


Install and configure a consent management platform (Cookiebot preferred; Complianz or Termly acceptable with rationale).
Configure it in prior-blocking / opt-in mode so non-essential scripts are suppressed until the visitor affirmatively consents. A passive "by browsing you agree" banner is not acceptable.
Verify with testing that no non-essential tracker fires pre-consent.


3. Accessibility audit (WCAG 2.1 AA)


Run machine-detectable audits using WAVE, axe DevTools, and/or Lighthouse across key page templates.
Deliver a prioritized list of issues with severity and effort estimates.
Remediate the high-impact, machine-detectable items: alt text, color contrast, keyboard navigation, form labels, heading hierarchy, link text, and the user-scalable=0 / maximum-scale=1.0 viewport restriction currently disabling pinch-zoom.
Note which issues require manual or screen-reader testing beyond automated scanning.
Do not install an accessibility overlay widget (accessiBe, UserWay, AudioEye, etc.). I'm aware these increase litigation risk and want them avoided.


4. Documentation


A short written record of what was audited, what was changed, what tools were used, and what remains open.


Deliverables


Third-party tracker/cookie inventory (written)
Configured, tested consent platform in opt-in/prior-blocking mode
WCAG 2.1 AA audit report with prioritized issues
Remediation of high-impact machine-detectable accessibility issues
Summary documentation of work performed and open items


Required experience


Demonstrated WordPress and Divi experience
Hands-on experience configuring Cookiebot, Complianz, Osano, or a comparable CMP in prior-blocking mode
Working knowledge of WCAG 2.1 AA and tools like WAVE, axe, and Lighthouse
Familiarity with the California CIPA / cookie-consent litigation context (consent-before-tracking)
Clear written communication; able to produce documentation a non-developer and an attorney can both follow


Nice to have


Prior accessibility remediation work with screen-reader testing
Privacy/compliance project experience for small businesses


Scope note

This is technical implementation and audit work. It is not legal advice, and final compliance decisions and any privacy-policy language will be reviewed separately by counsel.

How to apply

Send a one-minute screencast video walking me through:


how you would install the consent management platform
how you would run an audit and install apps or make changes to my website
how long it would take you to do all of it


Also include:


Two examples of similar audit or consent-setup work (sites or redacted reports)
Which CMP you'd recommend for my site and why
Your estimated hours and rate (hourly or fixed-bid both fine)
Availability to start
To show you read this all the way through, in the first sentence of your reply to me, tell me cherries are your favorite fruit.