Data Privacy & Data Protection Specialist

Job Summary

We are looking for a Data Privacy & Data Protection Specialist with 2+ years of relevant experience in data privacy, data protection, and regulatory compliance. The ideal candidate should have hands-on knowledge of privacy regulations, privacy assessments, data protection frameworks, and compliance activities.

Key Responsibilities

• Support and implement data privacy and data protection policies, processes, and compliance requirements.
• Ensure compliance with applicable privacy regulations, including GDPR and the Digital Personal Data Protection (DPDP) Act.
• Conduct and support Data Protection Impact Assessments (DPIA) and privacy risk assessments.
• Assist with Data Processing Agreements (DPA), data privacy assessments, and third-party privacy reviews.
• Support Data Mapping and Data Flow Analysis to identify how personal and sensitive data is collected, processed, stored, and shared.
• Assist in maintaining Records of Processing Activities (RoPA) and other privacy documentation.
• Support implementation and compliance activities related to ISO 27701 and privacy management frameworks.
• Monitor changes in privacy regulations and assess their impact on organizational processes.
• Work with internal stakeholders to identify privacy risks and recommend appropriate controls and mitigation measures.
• Support privacy audits, compliance reviews, and preparation of reports and documentation.
• Assist in handling data subject rights requests, privacy queries, and related compliance activities.
• Coordinate with Legal, Information Security, IT, HR, and business teams on data privacy requirements.

• 2+ years of hands-on experience in Data Privacy / Data Protection / Privacy Compliance.
• Good understanding of GDPR and DPDP Act.
• Practical knowledge of DPIA, DPA, RoPA, Data Mapping, and Privacy Risk Assessments.
• Knowledge of ISO 27701 and Privacy Information Management Systems (PIMS).
• Understanding of personal data, sensitive personal data, data processing, data retention, and data lifecycle management.
• Experience in privacy compliance documentation and audit support.
• Strong analytical, documentation, communication, and stakeholder-management skills.

• Certifications such as CIPP/E, CIPM, CIPT, ISO 27701, or equivalent will be an advantage.
• Experience working with enterprise privacy programs or information security teams.
• Knowledge of additional privacy regulations such as CCPA/CPRA will be an added advantage.

Candidate Profile

The ideal candidate should be someone who has practical exposure to privacy and data protection activities, rather than only theoretical knowledge. Candidates with experience in GDPR, DPDP, DPIA/DPA, ISO 27701, data mapping, privacy assessments, and compliance will be preferred.