Data Privacy Specialist

Job Title: Privacy Specialist

Experience: 3–8 years

Role Overview

The Privacy Specialist is responsible for supporting and
strengthening the organization’s privacy and personal data protection program,
with strong working knowledge of India’s Digital Personal Data Protection
(DPDP) Act and applicable rules. The role focuses on privacy compliance, data
handling practices, risk assessments, documentation, individual rights
requests, and coordination with business and technical teams. Experience with
the EU General Data Protection Regulation (GDPR) is an added advantage.

Key Responsibilities

DPDP Compliance & Privacy Governance

• Maintain
  and support the organization’s privacy program in alignment with India’s
  DPDP Act and applicable rules and guidance
  
• Translate
  privacy obligations into practical policies, procedures, workflows, and
  controls for relevant business functions
  
• Support
  privacy governance activities, maintain compliance registers, and track
  implementation of privacy requirements
  
• Monitor
  changes in privacy laws, rules, and regulatory guidance and assess their
  potential impact on organizational practices
  

Personal Data Lifecycle & Data Principal Rights

• Support
  data mapping and records of personal data processing, including
  collection, use, sharing, retention, and deletion
  
• Help
  establish and maintain processes for handling data principal requests,
  grievances, consent withdrawal, and related communications, as applicable
  
• Review
  privacy notices, consent language, and data collection forms to help
  ensure transparency and appropriate purpose limitation
  
• Coordinate
  with business and technical teams to support retention schedules, deletion
  processes, and appropriate handling of personal data
  

Privacy Risk Assessments & Incident Management

• Conduct
  or coordinate privacy impact and risk assessments for new projects,
  products, vendors, and changes to personal data processing
  
• Identify
  privacy risks and recommend proportionate controls and remediation actions
  in collaboration with relevant teams
  
• Support
  the identification, assessment, escalation, and documentation of personal
  data breaches and privacy incidents
  
• Coordinate
  with Security, Legal, IT, and business stakeholders on incident response,
  required assessments, and applicable notification obligations
  

Third-Party Privacy & GDPR (Added Advantage)

• Review
  vendor and partner privacy practices, contractual clauses, and
  data-processing arrangements with relevant stakeholders
  
• Support
  privacy due diligence and track remediation of issues identified during
  vendor reviews or assessments
  
• Where
  applicable, assist with GDPR-related activities such as data subject
  rights, lawful bases, records of processing, and cross-border transfer
  reviews
  
• Help
  map privacy requirements across jurisdictions and identify common controls
  while accounting for jurisdiction-specific obligations
  

Documentation, Training & Stakeholder Management

• Maintain
  privacy policies, procedures, notices, assessment records, processing
  registers, and evidence of compliance
  
• Prepare
  privacy compliance updates, risk summaries, metrics, and reports for
  management and internal stakeholders
  
• Deliver
  or coordinate privacy awareness sessions and provide practical guidance to
  teams handling personal data
  

Required Skills & Experience

• 3–5
  years of experience in data privacy, privacy compliance, information
  security GRC, legal compliance, or a related role
  
• Strong,
  demonstrable knowledge of India’s DPDP Act and applicable rules, including
  key obligations relating to notice, consent where applicable, data
  principal rights, safeguards, breach response, and accountability
  
• Experience
  with privacy documentation, data mapping, risk assessments, compliance
  reviews, and coordination with cross-functional stakeholders
  

Preferred Qualifications

• Bachelor’s
  degree in Law, Information Technology, Cybersecurity, Business, or a
  related field; relevant privacy or data protection experience may also be
  considered
  
• Working
  experience with DPDP, GDPR is an added advantage; certifications or
  training such as CIPP/A, CIPP/E, CIPM, or other relevant privacy
  qualifications are desirable
  
• Experience
  managing security incidents and crisis situations
  
• Strong
  leadership, communication, and decision-making skills
  

Preferred Qualifications

• Bachelor’s
  degree in IT, Cybersecurity, or related field