Privacy & Data Compliance Consultant - BFSI

Job Description – Privacy & Data Compliance Consultant

Job Title: Privacy & Data Compliance Consultant
Location: Gurgaon
Experience: 2–3 Years
CTC: Up to ₹15 LPA
Notice Period: Immediate to Maximum 15 Days

About the Company

We are a leading Data Privacy and Data Compliance consulting firm, helping businesses stay compliant, secure, and future-ready in an ever-evolving digital landscape. Our expertise spans global data protection regulations including GDPR, DPDPA, PDPB, CCPA, and other international privacy frameworks. We partner with startups, SMEs, and enterprises to build robust privacy programs, conduct compliance assessments, and implement strategic governance solutions that align regulatory compliance with business growth.

Role Overview

We are looking for a Privacy & Data Compliance Consultant with 2–3 years of experience in data privacy, information security, or compliance. The ideal candidate should have hands-on experience in implementing privacy programs, conducting compliance assessments, supporting ISMS initiatives, and working with international privacy regulations and security frameworks.

Key Responsibilities

• Design, implement, and manage data privacy and protection programs.


• Conduct privacy risk assessments, gap assessments, audits, and compliance reviews.


• Assess organizational compliance against frameworks such as ISO 27001, ISO 27701, NIST, and HITRUST.


• Interpret and advise clients on global privacy regulations including GDPR, CCPA, DPDPA, and other applicable laws.


• Draft and review privacy policies, data protection documentation, audit reports, compliance reports, and implementation roadmaps.


• Support Information Security Management System (ISMS) implementation and cybersecurity governance initiatives.


• Collaborate with internal teams and clients to identify privacy risks and recommend mitigation strategies.


• Assist in privacy impact assessments (PIAs), vendor assessments, and data governance initiatives.


• Stay updated with evolving global privacy laws, industry standards, and regulatory requirements.

Required Skills & Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Law, or a related discipline.


• 2–3 years of relevant experience in Data Privacy, Information Security, Risk & Compliance, or Governance.


• Working knowledge of:
  
  
  
  • GDPR
  
  
  • CCPA
  
  
  • DPDPA/PDPB (preferred)
  
  
  • ISO 27001
  
  
  • ISO 27701
  
  
  • NIST Framework
  
  
  • HITRUST
  
  
  
  


• Experience in privacy audits, compliance assessments, and policy drafting.


• Strong analytical, documentation, and stakeholder management skills.


• Excellent written and verbal communication skills.

Preferred Certifications

• CIPM (Certified Information Privacy Manager)


• CIPP/E (Certified Information Privacy Professional – Europe)


• CIPT (Certified Information Privacy Technologist) (preferred)


• ISO 27001 Lead Implementer/Lead Auditor (added advantage)

What We Offer

• Opportunity to work on global privacy and compliance projects.


• Exposure to international regulatory frameworks and enterprise clients.


• Collaborative, learning-driven work environment.


• Career growth in one of the fastest-growing domains of cybersecurity and compliance