Data Privacy Specialist

Job Title: Privacy Specialist

Experience: 3–8 years

Role Overview

• The Privacy Specialist is responsible for supporting and
• strengthening the organization’s privacy and personal data protection program,
• with strong working knowledge of India’s Digital Personal Data Protection
• (DPDP) Act and applicable rules. The role focuses on privacy compliance, data
• handling practices, risk assessments, documentation, individual rights
• requests, and coordination with business and technical teams. Experience with
• the EU General Data Protection Regulation (GDPR) is an added advantage.

Key Responsibilities

DPDP Compliance & Privacy Governance

Maintain

and support the organization’s privacy program in alignment with India’s

DPDP Act and applicable rules and guidance

Translate

privacy obligations into practical policies, procedures, workflows, and

controls for relevant business functions

Support

privacy governance activities, maintain compliance registers, and track

implementation of privacy requirements

Monitor

• changes in privacy laws, rules, and regulatory guidance and assess their
• potential impact on organizational practices
• Personal Data Lifecycle & Data Principal Rights

Support

data mapping and records of personal data processing, including

collection, use, sharing, retention, and deletion

Help

establish and maintain processes for handling data principal requests,

grievances, consent withdrawal, and related communications, as applicable

Review

privacy notices, consent language, and data collection forms to help

ensure transparency and appropriate purpose limitation

Coordinate

with business and technical teams to support retention schedules, deletion

processes, and appropriate handling of personal data

Privacy Risk Assessments & Incident Management

Conduct

or coordinate privacy impact and risk assessments for new projects,

products, vendors, and changes to personal data processing

Identify

privacy risks and recommend proportionate controls and remediation actions

in collaboration with relevant teams

Support

the identification, assessment, escalation, and documentation of personal

data breaches and privacy incidents

Coordinate

with Security, Legal, IT, and business stakeholders on incident response,

required assessments, and applicable notification obligations

Third-Party Privacy & GDPR (Added Advantage)

Review

vendor and partner privacy practices, contractual clauses, and

data-processing arrangements with relevant stakeholders

Support

privacy due diligence and track remediation of issues identified during

vendor reviews or assessments

Where

• applicable, assist with GDPR-related activities such as data subject
• rights, lawful bases, records of processing, and cross-border transfer
• reviews

Help

map privacy requirements across jurisdictions and identify common controls

while accounting for jurisdiction-specific obligations

Documentation, Training & Stakeholder Management

Maintain

privacy policies, procedures, notices, assessment records, processing

registers, and evidence of compliance

Prepare

privacy compliance updates, risk summaries, metrics, and reports for

management and internal stakeholders

Deliver

or coordinate privacy awareness sessions and provide practical guidance to

teams handling personal data

Required Skills & Experience

3–5

• years of experience in data privacy, privacy compliance, information
• security GRC, legal compliance, or a related role
• Strong,
• demonstrable knowledge of India’s DPDP Act and applicable rules, including
• key obligations relating to notice, consent where applicable, data
• principal rights, safeguards, breach response, and accountability

Experience

with privacy documentation, data mapping, risk assessments, compliance

reviews, and coordination with cross-functional stakeholders

Bachelor’s

• degree in Law, Information Technology, Cybersecurity, Business, or a
• related field; relevant privacy or data protection experience may also be
• considered

Working

• experience with DPDP, GDPR is an added advantage; certifications or
• training such as CIPP/A, CIPP/E, CIPM, or other relevant privacy
• qualifications are desirable

Experience

managing security incidents and crisis situations

Strong

leadership, communication, and decision-making skills

Preferred Qualifications

Bachelor’s

• degree in IT, Cybersecurity, or related field
• Certifications such as ( Certified Information
• Systems Security Professional (CISSP) - Certified Information Privacy
• Professional (CIPP) - Certified Data Privacy Solutions Engineer (CDPSE ), CDPO
• or ISO/IEC 27701.