SENIOR TECHNICAL LEAD - Data Privacy Assessment & Consulting

Senior Consultant / Lead Consultant DPDPA, ISO 27001, CERT-In & CIS

Job Title

Senior Consultant / Lead Consultant Information Security, Privacy & Compliance

Experience

8 12 Years

Location

• Bangalore / Onsite
• Shift Timings Monday to Friday 9am to 5pm
• Saturday and Sunday Week offs
• No Hybrid

Job Summary

We are seeking an experienced Information Security and Privacy professional to support and lead compliance, governance, risk management, and security assurance initiatives. The candidate will be responsible for driving Digital Personal Data Protection Act (DPDPA) compliance, ISO 27001:2022 implementation and audit readiness, CERT-In compliance requirements, CIS security assessments, risk management programs, and security governance activities across the organization.

The role requires strong stakeholder management skills and the ability to work closely with leadership teams, legal, technology, privacy, audit, and business stakeholders.

Key Responsibilities

DPDPA & Privacy Compliance

• Lead DPDPA compliance assessments, gap analyses, and remediation programs.
• Support the Data Protection Officer (DPO) in privacy governance activities.
• Develop and review privacy policies, consent notices, privacy notices, data retention schedules, and data processing procedures.
• Conduct Privacy Impact Assessments (PIA) and Data Protection Impact Assessments (DPIA).
• Define and track privacy compliance metrics and reporting.
• Support implementation of consent management and data subject rights processes.
• Manage personal data breach assessment and notification activities.

• Lead ISO 27001 implementation, maintenance, and continual improvement activities.
• Conduct ISMS risk assessments and risk treatment planning.
• Develop and maintain information security policies, standards, procedures, and guidelines.
• Coordinate internal audits, management reviews, and certification audits.
• Monitor compliance with ISO 27001 controls and organizational requirements.
• Drive corrective actions and closure of audit observations.

• Ensure compliance with applicable CERT-In directions and reporting requirements.
• Support security incident management and cyber incident reporting.
• Coordinate with SOC, IT, and business teams during security incidents.
• Establish and maintain incident response procedures and evidence management processes.
• Support cyber crisis and incident response exercises.

• Conduct CIS Controls maturity assessments and gap assessments.
• Develop remediation roadmaps aligned with CIS Controls v8.
• Track implementation status and risk reduction initiatives.
• Coordinate vulnerability management, configuration reviews, and control effectiveness assessments.
• Prepare executive dashboards and security maturity reports.

• Perform risk assessments and compliance reviews.
• Maintain risk registers, treatment plans, and compliance trackers.
• Support third-party risk management assessments.
• Drive awareness programs and security training initiatives.
• Prepare reports and presentations for senior management and audit committees.

Mandatory

• Strong experience in DPDPA compliance and privacy governance.
• Hands-on experience with ISO 27001:2022 implementation and audits.
• Experience in CERT-In compliance and incident management processes.
• Experience conducting CIS Controls assessments and security gap assessments.
• Knowledge of risk management frameworks and security governance.
• Experience drafting security, privacy, and compliance policies.
• Strong documentation, reporting, and communication skills.
• Experience interacting with auditors, regulators, and senior management.

• ISO 27001 Lead Implementer and/or Lead Auditor.
• CDPSE, CIPP, CIPM, or equivalent privacy certifications.
• CISSP, CISA, CRISC, or CEH.
• DPDPA-related certification or privacy training.
• ISO 27701 Lead Implementer (preferred).

• Bachelors degree in engineering, Computer Science, Information Technology, Cyber Security, or related discipline.
• Masters degree or relevant security/privacy certifications preferred.

• Stakeholder Management
• Leadership & Team Coordination
• Risk-Based Decision Making
• Policy Development
• Audit Management
• Incident Response Coordination
• Analytical & Problem-Solving Skills
• Executive Communication & Reporting

• ISO/IEC 27001:2022 Lead Auditor
• ISO/IEC 27001:2022 Lead Implementer
• Certified Information Systems Auditor (CISA)
• Certified Information Systems Security Professional (CISSP)
• Certified in Risk and Information Systems Control (CRISC)

ISO Internal Auditor, Data Privacy Assessment & Consulting