Senior Privacy

Job Description: Senior Privacy & Data Protection Specialist (DPDPA Implementation)Experience:8+ YearsLocation:BangaloreIndustry:Cybersecurity, Data Privacy & GovernanceRole Type:Consulting / Client-Facing ImplementationRole OverviewWe are seeking a seasoned Privacy & Data Protection Specialist to lead the end-to-end implementation of the Digital Personal Data Protection Act (DPDPA) for our clients across India. The ideal candidate will come from a cybersecurity background, with deep knowledge of global privacy frameworks such as GDPR, PDPL, DIFC DP Law, CCPA, or other regional data protection regulations. The role requires strong consulting skills, hands-on execution capabilities, and the ability to guide organizations through privacy transformation.Key Responsibilities1. DPDPA Implementation & Compliance- Lead full-cycle implementation of DPDPA requirements, including data mapping, consent management, lawful processing, and data principal rights management. - Drive readiness assessments, gap analysis, and development of remediation roadmaps. - Create DPDPA-aligned policies, procedures, templates, and artifacts for clients.2. Privacy Governance & Framework Design- Develop and operationalize privacy governance models, including DPIA programs, RoPA, data classification, retention schedules, and breach workflows. - Establish privacy-by-design principles and integrate them into IT and business processes. - Assist clients in setting up Data Protection Office (DPO) functions.3. Advisory & Consulting- Work closely with clients’ IT, Legal, Security, HR, and Compliance teams to drive privacy adoption. - Deliver expert advisory on international privacy laws (GDPR/PDPL/CCPA etc.) and their alignment or deviation from DPDPA. - Conduct privacy workshops, awareness programs, and executive briefings.4. Cybersecurity Integration- Align privacy and security requirements, bridging DPDPA with cybersecurity controls (ISO 27001, NIST, SOC2, DPMS, CICRA, CSRF etc.). - Advise on technical safeguards, including encryption, access controls, DLP, and data minimization strategies. - Support incident response processes for data breaches and coordinate breach notifications.5. Documentation & Reporting- Prepare audit-ready documentation, dashboards, and compliance reports. - Create implementable solutions, checklists, and toolkits for client delivery. - Track engagement progress and ensure timely completion of project milestones.Required Skills & ExperiencePrivacy Expertise- Demonstrated experience implementing GDPR, DPDPA, PDPL (Saudi), ADGM/DIFC DP Law, CCPA, or similar regulations. - Strong understanding of privacy principles, data life cycle, data subject rights, consent, cross-border transfers, and lawful basis processing.Cybersecurity Background- Solid grounding in information security concepts, preferably with experience in ISO 27001 or similar frameworks. - Ability to integrate privacy and cybersecurity to build holistic protection strategies.Technical & Consulting Skills- Proven experience conducting DPIAs, LIA/DTIA, gap assessments, data mapping, and privacy risk assessments. - Strong documentation abilities—capable of producing policies, processes, SOPs, and compliance reports. - Excellent client-facing, communication, stakeholder-handling, and presentation skills. - Experience in advisory/consulting roles is highly preferred.Preferred Qualifications- Certifications in privacy and security such as CIPP/E, CIPM, CIPT, ISO 27701 Lead Implementer/Auditor, ISO 27001 Lead Implementer/Auditor, CDPSE, etc. - Experience working in cybersecurity consulting firms or with multi-regional clients. - Familiarity with privacy automation tools (OneTrust, BigID, Securiti.ai, TrustArc) is an added advantage.Personal Attributes- Strong analytical and problem-solving skills. - Ability to work independently in consulting engagements. - Thought leadership mindset with willingness to mentor and guide clients. - High ethical standards and commitment to data protection principles.